BlackFog
BlackFog is a private cybersecurity company that sells an AI-driven Anti Data Exfiltration (ADX) platform to prevent ransomware, insider threats, and shadow AI data leaks at the endpoint network layer for enterprise, MSSP, and government customers.
- Company typePrivate
- Founded2015
- HeadquartersSan Francisco, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What BlackFog does
BlackFog is a privately held cybersecurity company founded in 2015 and headquartered in San Francisco, with additional offices in London and Belfast. It commercializes a proprietary Anti Data Exfiltration (ADX) platform that operates at the OSI Layer 3 network layer, using real-time network filtering and AI-based behavioral profiling to detect and prevent unauthorized data leaving endpoints. The company frames its approach against the dominant perimeter-defense paradigm: rather than attempting to block initial infiltration, BlackFog's products target the data-exfiltration stage that it claims drives 96% of modern ransomware outcomes. Its product suite comprises five offerings — ADX Vision (endpoint-native shadow AI detection), ADX Protect (enterprise exfiltration protection), ADX Agility (multi-tenant MSSP solution), ADX Instinct (virtual CISO advisory service), and ADX Defend (personal privacy and ransomware protection) — supported by a single cross-platform agent covering Windows, macOS, Android, and iOS with under 1% CPU overhead.
The company sells primarily through direct enterprise sales and a channel program for managed security service providers, with a 14-day free AI Discovery & Data Exposure Assessment as the top-of-funnel acquisition vehicle. Pricing is annual subscription-based and quote-driven, with tiered plans disclosed on the website but no publicly listed price points. Named customers are predominantly small municipal governments, regional port authorities, and small-to-mid enterprises across government, healthcare, energy, and architecture verticals. The company has raised approximately $18M in cumulative disclosed funding (including $10M Series 2 from Lyon Capital in June 2023 and $5M from Lyon Capital Management in October 2025), maintains certifications including SOC 2 Type 2, SOC 3, TX-RAMP Level 1, CSA AI Trust Pledge, and GDPR, and reports research coverage spanning 135 countries and 1,174 publicly disclosed ransomware attacks tracked in 2025.
The go-to-market combines sales-led enterprise motion with content marketing (quarterly ransomware reports, blog, eBooks, videos) and earned media in outlets including PCMag, Forbes, and Cybersecurity Dive. Recent strategic emphasis has been on the ADX Vision launch (December 2025) and macOS extension (June 2026) targeting enterprise AI-governance budgets, supported by the November 2025 appointment of former Yahoo! CFO Kenneth A. Goldman to the Board of Advisors. The company employs 11–50 staff across four named executives (CEO Dr. Darren Williams, CRO John Sarantakes, CMO/President Brenda Robb, and Board Advisor Goldman), and has not disclosed acquisitions, IPO plans, or material M&A activity.
BlackFog firmographics
Firmographics- Name
- BlackFog
- Legal name
- BlackFog, Inc.
- Website
- https://blackfog.com
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- BlackFog is a private cybersecurity company that sells an AI-driven Anti Data Exfiltration (ADX) platform to prevent ransomware, insider threats, and shadow AI data leaks at the endpoint network layer for enterprise, MSSP, and government customers.
- Ownership category
- akta.pro rank
BlackFog industry classification
Industry- Product category
- Endpoint Security Software
- NAICS
- Security Guards and Patrol Services (561612)
- SIC
- Services-Detective, Guard & Armored Car Services (7381)
- akta.pro primary industry
- Browser & Web Isolation Security (HDADAEAK)
- akta.pro secondary industries
- Web Application Security (WAF, RASP) (HDADACAA), Edge Security Delivery (DDoS, WAF, Bot Mitigation at Edge) (HDABAGAH), Secure Model Deployment & Runtime Protection (sandboxing, isolation) (HDAAAKAH), DDoS Mitigation & Traffic Scrubbing (Edge/ADC‑Adjacent) (HDAFAHAJ)
Keywords
Where BlackFog is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Offices4 records
Markets served
BlackFog business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- Enterprise Security Software Subscriptions: BlackFog generates revenue through subscription-based licensing of its ADX product suite including ADX Vision, ADX Protect, ADX Agility, ADX Instinct, and ADX Defend. Products are offered in tiered plans (compare plans available on website) with enterprise console management for multi-device deployments.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | ADX Vision - Shadow AI security for endpoints |
| Subscription | Annual | ADX Protect - Enterprise level exfiltration protection |
| Subscription | Annual | ADX Agility - For MSSPs and service providers |
| Subscription | Annual | ADX Instinct - Virtual CISO service |
| Subscription | Annual | ADX Defend - Personal privacy and ransomware protection |
Go-to-market motion2 records
Distribution channels4 records
Marketing channels9 records
BlackFog product offering
Product offeringCore offering
BlackFog provides an AI-driven Anti Data Exfiltration (ADX) platform that prevents data from leaving enterprise and personal devices, blocking ransomware, insider threats, and shadow AI exfiltration at OSI Layer 3 through real-time network filtering and behavioral profiling. Its product suite spans endpoint agents (ADX Protect), shadow AI visibility (ADX Vision), MSSP multi-tenant management (ADX Agility), virtual CISO services (ADX Instinct), and consumer protection (ADX Defend).
Product overview
BlackFog offers a unified Anti Data Exfiltration (ADX) platform architecture with multiple products designed to prevent data exfiltration, ransomware, and shadow AI threats. The core ADX product suite includes ADX Vision (shadow AI detection), ADX Protect (enterprise exfiltration protection), ADX Agility (for MSSPs), ADX Instinct (virtual CISO services), and ADX Defend (personal protection). The platform uses AI-based behavioral analysis and real-time network filtering at OSI layer 3 to stop unauthorized data transfers, blocking cyberattacks before data leaves devices.
Differentiator
Problem solved
Functional benefit
Brands
- ADX Vision: Endpoint-native AI security platform for detecting and preventing shadow AI activity on endpoints
- ADX Protect
- ADX Agility
- ADX Instinct
- ADX Defend
Products and services
- ADX Vision Endpoint-native AI security platform that detects shadow AI activity and prevents unauthorized data exfiltration from unapproved AI tools, providing visibility into AI-bound data flows before encryption or transmission.
- ADX Protect Enterprise-level anti data exfiltration solution using AI-driven analysis and behavioral profiling to prevent cyberattacks, data theft, and ransomware in real-time across all endpoints.
- ADX Agility Multi-tenanted security solution built for MSSPs and service providers, with AI-powered technology for managing multiple customer environments and tenant consoles.
- ADX Instinct Expert-led virtual CISO service providing strategic guidance, risk management, and tailored compliance support for organizations requiring senior security leadership.
- ADX Defend Lightweight privacy and ransomware protection solution for individual users, providing endpoint security for personal devices.
Quantifiable outcome
- 96% of ransomware attacks now involve data theft
- +4 more outcomes
Companies that use BlackFog
Customer profileNamed customers8 records
Segments6 records
Ideal customer profiles3 records
BlackFog technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability4 records
Feature6 records
BlackFog partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- AWScore infrastructureAmazon Web Services serves as BlackFog's infrastructure provider for the enterprise cloud console. BlackFog's enterprise console runs on AWS infrastructure, with AWS Data Processing Agreement approved by EU data protection authorities ensuring compliance with EU data protection laws.
Scale indicators9 records
Recent moves6 records
Expansion highlights6 records
BlackFog competitors and assessment
Company assessmentBroad incumbents
- CrowdStrike: CrowdStrike is a leading endpoint security and XDR platform that increasingly bundles data exfiltration prevention and AI workload security into its Falcon platform. Directly comparable as a cybersecurity endpoint incumbent that BlackFog must displace or differentiate against in enterprise deals.
- Microsoft Defender for Endpoint: Microsoft Defender for Endpoint is a leading enterprise endpoint security platform bundled with Microsoft 365 E5 and increasingly adds data exfiltration and AI usage controls. Represents the most significant competitive threat given its inclusion in default enterprise contracts.
- Zscaler: Zscaler provides cloud-native security including Zscaler Data Protection and AI-based risk detection for data in motion. Comparable as it addresses exfiltration and shadow IT/AI through cloud-delivered security, though at a different architectural layer.
- Proofpoint: Proofpoint is a leader in data loss prevention, email security, and insider threat management, directly addressing exfiltration risks for enterprises. Comparable as it provides data-centric security controls that overlap with BlackFog's ADX use cases.
- Palo Alto Networks: Palo Alto Networks is a broad cybersecurity incumbent with Cortex XDR and Prisma product lines covering endpoint, network, and cloud data protection. A key incumbent competitor that could bundle ADX-like capabilities into integrated enterprise contracts.
- SentinelOne: SentinelOne offers an AI-driven endpoint security platform (Singularity) with data exfiltration prevention and behavioral analysis. Highly comparable as a direct endpoint security competitor using AI-based threat prevention on endpoints.
Emerging players
- Abnormal Security: Abnormal Security is an AI-native platform for email security, account takeover, and data loss prevention with behavioral analysis. Comparable as an AI-first security startup addressing data exfiltration through AI-based detection, though focused primarily on email and identity attack surfaces.
- Varonis: Varonis provides data security and analytics focused on detecting insider threats, exfiltration, and misuse of sensitive data across cloud and on-premises repositories. Comparable as it addresses data-centric security with AI/behavioral analytics, partially overlapping with BlackFog's ADX value proposition.
Direct peers
- Netskope: Netskope is a SASE leader with strong CASB and data loss prevention capabilities that compete in the same data exfiltration and shadow IT/AI prevention space. Directly comparable as a security platform focused on preventing sensitive data from leaving the enterprise.
- Menlo Security: Menlo Security provides browser isolation and web security to prevent data leakage and malware delivery. Comparable as it addresses data exfiltration prevention through a different architectural approach (browser/web isolation vs. network-layer ADX).
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
BlackFog social profiles
Digital presenceBlackFog compliance and trust
Trust signalCompliance6 records
BlackFog financial estimates
Financial estimateRevenue estimate
Valuation estimate
BlackFog leadership team
Management profileNumber of profiles
Profiles4 records
BlackFog funding detail
Funding detailFunding overview
Funding rounds5 records
Investors3 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
BlackFog M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about BlackFog
What does BlackFog do?
BlackFog provides an AI-driven Anti Data Exfiltration (ADX) platform that prevents data from leaving enterprise and personal devices, blocking ransomware, insider threats, and shadow AI exfiltration at OSI Layer 3 through real-time network filtering and behavioral profiling. Its product suite spans endpoint agents (ADX Protect), shadow AI visibility (ADX Vision), MSSP multi-tenant management (ADX Agility), virtual CISO services (ADX Instinct), and consumer protection (ADX Defend).
Is BlackFog a public or private company?
BlackFog is a private company. It is classified as venture growth investor backed and is currently operating.
When was BlackFog founded?
BlackFog was founded in 2015. It employs 11 to 50 people.
Where is BlackFog based?
BlackFog is headquartered in San Francisco, United States, in the North America region.
How does BlackFog make money?
One revenue line is on record: enterprise Security Software Subscriptions.
Who are BlackFog's main competitors?
Broad incumbents on record are CrowdStrike, Microsoft Defender for Endpoint, Zscaler, Proofpoint, Palo Alto Networks and SentinelOne. Emerging players are Abnormal Security and Varonis. Direct peers are Netskope and Menlo Security.
Does BlackFog have an API?
No public API is recorded for BlackFog.
What industry is BlackFog in?
BlackFog's product category is Endpoint Security Software. Its primary akta.pro industry code is HDADAEAK, Browser & Web Isolation Security, with a secondary code of HDADACAA, Web Application Security (WAF, RASP). Its NAICS code is 561612 and its SIC code is 7381.