Thales

What Thales does

Thales S.A. is a French publicly listed aerospace and defense group (Euronext Paris: HO, CAC 40 component) headquartered in La Défense, Paris, operating across three primary segments: defense (€12.2B in 2025), aerospace (€5.9B), and digital identity and cybersecurity. The cybersecurity portfolio, anchored by the Cloud Protection & Licensing division, spans the CipherTrust Data Security Platform (unified discover-classify-protect with transparent encryption, tokenization, key management, secrets management, and DSPM), the Imperva Application Security Platform (WAF, Advanced Bot Protection, API Security, DDoS, account takeover protection, and quantum-safe hybrid TLS via ML-KEM768), the OneWelcome Identity Platform (customer/workforce/B2B identity), and the Sentinel Software Monetization Platform (licensing, entitlement, IP protection). The company also builds large-scale defense and aerospace systems including the SkyDefender integrated air and missile defense dome (incorporating cortAIx AI accelerator and Thales Alenia Space early warning), Sonar 76Nano undersea detection, Royal Navy Remote Command Centers, PureFlyt Flight Management Systems, AVIATOR SATCOM, FlytEDGE inflight entertainment, and TopSky-Flow air traffic management.

The business model combines multi-year defense and aerospace systems contracts (€41.6B record order backlog at end of 2025, +6% YoY), one-time and volume hardware sales of Luna/payShield HSMs, 5G SIM/eSIM secure elements, biometric passport inlays, and embedded secure elements for payment wearables, recurring subscription/SaaS revenue from CipherTrust Data Protection on Demand, SafeNet Trusted Access, and the AI Security Fabric, plus perpetual/term software licensing via Sentinel and professional services for post-quantum migration. Pricing is predominantly quote-based enterprise with free trials (Imperva, SafeNet Trusted Access) and a usage-based cloud marketplace (DPoD). Thales serves 30,000+ organizations including 58% of the Fortune Global 500, with named customers spanning Sabre (4,000 APIs), FAB Bank (payment ring), Fireblocks (95+ banks via Luna HSM), First Abu Dhabi Bank, Cathay Pacific (30 A330neo), UK MoD (£100M contract), Irish Naval Service, SAP/S3NS, Queensland Government (1.2M users), and Dominican Republic passport modernization.

Geographically, Thales operates across 184 countries with major offices in Paris, Austin (CPL subsidiary), Dubai (UAE Cyber Security Council MoU), Bengaluru (new global R&D centre for embedded AI), Singapore (FlytEDGE R&D), Mexico City (1,300+ ATM engineers), and London (NDEC training academy). The group hired 8,800 employees in 2025 and plans 9,000+ in 2026, including 450 in India, 60 in UAE, and 30 in Saudi Arabia. Strategic JVs include S3NS with Google Cloud (SecNumCloud-qualified sovereign cloud, 70+ customers) and the planned Airbus/Leonardo/Thales space merger targeting 25,000 employees by 2027.

Name

Thales

Legal name

Thales S.A.

Website

https://cpl.thalesgroup.com

Company type

Public

Founded year

2001

Operating status

Operating

Headcount range

1,001–5,000 employees

Short description

Thales S.A. is a French publicly listed aerospace and defense group (CAC 40) providing integrated air defense systems, avionics, secure communications, sovereign cloud, and a unified cybersecurity portfolio (CipherTrust, Imperva, OneWelcome, Sentinel) to 30,000+ organizations including 58% of the Fortune Global 500, with €22.1B FY2025 revenue and €41.6B order backlog.

Ownership category

akta.pro rank

Product category

Aerospace and Defense

NAICS

Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (54151)

akta.pro primary industry

Security & Trusted Hardware ICs (Secure Element/TPM/Crypto) (HDAHABAF)

akta.pro secondary industries

Secure ICs, Smart Cards & Trusted Hardware (HDAHAAAJ), MPC / HSM / Key Management Infrastructure (FSADACAC), Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD)

Keywords

• Data security
• Application security
• Identity access management
• Air defense systems
• Aerospace avionics

Headquarters

HQ city

Austin

HQ country

United States

HQ region

North America

Offices7 records

Markets served

GTM type

B2B

Offering type

Hardware or Manufacturing

Cost components

Personnel, Technology or R&D, Operations, Supply Chain, Marketing or Sales, Infrastructure

Revenue model

1. Subscription / SaaS (CipherTrust DPoD, SafeNet Trusted Access): Recurring subscription revenue from cloud-based data protection (Data Protection on Demand), identity (SafeNet Trusted Access), and AI security services billed periodically.
2. Hardware Sales (HSMs, SIM/eSIM, Secure Elements): One-time and volume hardware sales of Luna/payShield HSMs, 5G SIM/eSIM secure elements, biometric passport inlays, and secure elements for payment wearables.
3. Professional Services & Training: Implementation, technical training, managed services, and consulting for CipherTrust deployments and post-quantum migration.
4. Software Licensing & Entitlement (Sentinel): Perpetual and term-based software licensing, entitlement management, usage intelligence, and IP protection revenue from the Sentinel Software Monetization platform.
5. Aerospace and Defense Systems Sales: Large-scale defense and aerospace systems contracts (e.g., SkyDefender, Rafale, Royal Navy autonomous MCM command centers, Air Traffic Management) booked as multi-year orders and recognized on milestone basis.
6. Managed Connectivity Services: Recurring managed eSIM connectivity and remote SIM provisioning services (e.g., for Cielo payment terminals, Airalo travelers, Simetric IoT).

Pricing tiers

Go-to-market motion5 records

Core offering

Thales sells enterprise-grade cybersecurity and digital identity software, hardware security modules, and sovereign cloud services, alongside integrated defense and aerospace systems. Its cybersecurity portfolio centers on the CipherTrust Data Security Platform, Imperva Application Security Platform, OneWelcome Identity Platform, AI Security Fabric, and Sentinel Software Monetization Platform, complemented by Luna and payShield HSMs and post-quantum cryptography. Its defense and aerospace portfolio delivers the SkyDefender air and missile defense dome, Sonar 76Nano, PureFlyt flight management, AVIATOR SATCOM, FlytEDGE inflight entertainment, TopSky-Flow air traffic management, and the cortAIx AI accelerator to government and enterprise customers worldwide.

Product overview

Thales offers a platform-plus-modules architecture for cybersecurity and digital identity, anchored on five flagship platforms: the AI Security Fabric (for securing Agentic AI and LLM applications), CipherTrust Data Security Platform (unified data discovery, classification, protection, and key management), Imperva Application Security Platform (WAF, API security, bot protection, DDoS, post-quantum TLS), OneWelcome Identity Platform (customer, workforce, and B2B identity), and Sentinel Software Monetization Platform (software licensing and IP protection). These platforms are extended through named modules including CipherTrust Data Security Posture Management (DSPM), CipherTrust Transparent Encryption, CipherTrust Application Data Protection, CipherTrust Data Discovery and Classification, CipherTrust Secrets Management, Data Protection on Demand (DPoD), High-Speed Encryptors, Hardware Security Modules (Luna HSMs and payShield payment HSMs), CipherTrust Cloud Key Manager, SafeNet Trusted Access, and FIDO Passkeys/Devices. Beyond cybersecurity, Thales also offers major defense and aerospace product lines including the SkyDefender integrated air and missile defense dome, the Sonar 76Nano undersea detection system, Remote Command Centers (M-Cube/cortAIx) for autonomous maritime warfare, PureFlyt Flight Management System, AVIATOR 200S/S SATCOM, FlytEDGE inflight entertainment, TopSky-Flow air traffic management, and the cortAIx AI accelerator. Thales also provides sovereign cloud capabilities through S3NS, a joint venture with Google Cloud offering SecNumCloud-qualified infrastructure.

Differentiator

Problem solved

Functional benefit

Brands

• CipherTrust: Unified data security platform offering data discovery & classification, transparent encryption, tokenization, key management, and secrets management.
• Imperva
• OneWelcome
• Sentinel
• payShield
• Luna
• cortAIx
• S3NS
• Thales Alenia Space

Products and services

• Thales AI Security Fabric Runtime security platform that secures Agentic AI and LLM-powered applications across the enterprise, including AI Application Security for monitoring LLM interactions and AI RAG Security for protecting data in retrieval-augmented generation pipelines. Addresses OWASP GenAI Top 10 threats.
• CipherTrust Data Security Platform Unified data-centric platform integrating data discovery, classification, data protection, and centralized management for keys and secrets. Named Overall Leader in KuppingerCole Leadership Compass on Data Security Platforms and Strong Performer in Forrester Wave; available on-premises or as CDSP-as-a-Service cloud deployment.
• Imperva Application Security Platform Protects mission-critical applications, APIs, and websites from bad bot, DDoS, and supply chain attacks. Includes Web Application Firewall, Advanced Bot Protection, Unified API Security, DDoS Protection, Client-Side Protection, Account Takeover Protection, and Content Delivery Network. Named WAAP Leader by KuppingerCole. Supports quantum-safe hybrid TLS combining classical X25519 with NIST-standardized ML-KEM768.
• OneWelcome Identity Platform
• Sentinel Software Monetization Platform
• Thales Hardware Security Modules (HSMs)
• CipherTrust Transparent Encryption
• CipherTrust Data Discovery and Classification
• CipherTrust Data Security Posture Management (DSPM)
• Data Protection on Demand (DPoD)
• SafeNet Trusted Access
• FIDO Passkeys and Devices
• SkyDefender Air and Missile Defense Dome

Named customers24 records

Segments8 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration27 records

AI capability7 records

Feature10 records

Scale indicators24 records

Recent moves11 records

Expansion highlights6 records

Direct peers

• Fortinet: Network and security platform competing with Thales' High-Speed Encryptors, HSMs, and Imperva application security in mid-market and large enterprise accounts.
• Cloudflare: Edge application security, WAF, bot mitigation, and API security — directly comparable to Imperva's core application security portfolio and increasingly competing on post-quantum TLS support.
• Zscaler: Cloud-native zero-trust networking and security platform; competes with Thales' OneWelcome IAM and broader application/data security portfolio for enterprise digital transformation budgets.
• HashiCorp: Secrets management (Vault), key management, and infrastructure-as-code security — directly competitive with CipherTrust Secrets Management, CipherTrust Cloud Key Manager, and Luna HSM cloud services.
• CrowdStrike: Cloud-native security platform competing in endpoint, identity, cloud workload, and SIEM — overlapping Thales' Imperva application security and OneWelcome identity offerings for enterprise buyers.
• Check Point Software Technologies: Enterprise network, cloud, and data security vendor competing with CipherTrust, Imperva, and HSM products; similar mix of hardware-rooted and software security offerings for regulated industries.
• Palo Alto Networks: Largest pure-play enterprise cybersecurity platform; competes with Thales' Imperva (application security), OneWelcome (IAM), and CipherTrust-adjacent cloud security capabilities across Fortune 500 accounts.
• Akamai Technologies: CDN, WAF, bot management, and API security — competes head-to-head with Imperva Application Security in protecting mission-critical applications and APIs at enterprise scale.

Broad incumbents

• Microsoft (Security): Bundles Entra ID, Defender, Purview, Key Vault, Double Key Encryption, and Sentinel SIEM — directly competes with OneWelcome IAM, CipherTrust, and Imperva across the Microsoft 365 footprint cited in Thales customer wins.
• Broadcom (Symantec Enterprise Security): Broad incumbent in data security, HSMs (via CA/Broadcom), and enterprise security; overlaps with CipherTrust data-at-rest encryption, key management, and broader Thales identity/security portfolio.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat7 records

Key risks6 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/ThalesGroup
• Xx.com/ThalesCloudSec
• Facebookfacebook.com/ThalesCloudSec

Compliance26 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles17 records

Subsidiaries8 records

Funding overview

Funding rounds2 records

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments2 records

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Thales