What iboss does

iboss is a Boston-based private cybersecurity vendor that provides an AI-Powered Secure Access Service Edge (SASE) platform delivered as cloud-native software with optional on-premises appliances (SE-170, 14800, NBC-14). Its platform unifies Secure Web Gateway, Zero Trust Network Access, CASB, Advanced DLP, Browser Isolation, Zero Trust SD-WAN, SSPM, DNS Security, and SSL decryption inside a single policy framework. The proprietary foundation is a containerized cloud architecture in which each customer receives dedicated gateway, browser-isolation, and reporting nodes, ensuring no traffic co-mingling across tenants; iboss holds 230+ issued and pending patents related to this architecture. AI capabilities layered onto the platform include signatureless CASB detection using live DOM inspection, dual risk scoring (application legitimacy plus data-loss potential), AI-driven SSPM/DSPM recommendations, GenAI chat monitoring across ChatGPT, Copilot, Gemini, Claude, and Perplexity, OCR-based image DLP, and Exact Data Match at one billion elements.

The company sells through per-user subscription tiers named Zero Trust Core, Advanced, and Complete, with eleven separately priced add-on modules such as AI-Powered CASB, SSPM+DSPM, Browser Isolation, Exact Data Match, and Enhanced Protective DNS; the platform is also listed on the Azure Marketplace. Distribution combines direct enterprise sales targeting CISOs and IT directors, MSP/MSSP partner platforms including a dedicated Federal MSSP SASE Platform, and a co-selling motion with Microsoft, CrowdStrike, Splunk, and major cloud providers. Customers named publicly span financial services (UBS, Goldman Sachs), energy (ExxonMobil), entertainment (Netflix), federal and municipal government (U.S. Army, OPM, City of Miami, Montgomery County), and education (Boston Public Schools, IDEA Public Schools).

iboss has raised approximately $180 million in disclosed funding across a 2015 Goldman Sachs Growth Equity round and a 2021 $145 million growth-equity round led by Francisco Partners and NightDragon; it has been recognized as a Leader in the GigaOm Radar for SASE 2026 (top 3 of 17 vendors), Leader and Outperformer in the GigaOm Radar for CASB, an IDC MarketScape ZTNA Leader, and holds FedRAMP Moderate authorization supporting CMMC 2.0 Level 2, HIPAA, PCI DSS, NIST 800-207, GDPR, and SOC 2 Type 2 compliance postures. The company is led by co-founders Paul Martini (CEO and CTO) and Peter Martini (President), with executives including CRO Matt Hartley and CSO Nikesh Kalra.

Name

iboss

Legal name

iboss

Website

https://iboss.com

Company type

Private

Founded year

2003

Operating status

Operating

Headcount range

101–250 employees

Short description

iboss is a Boston-based private cybersecurity vendor that delivers an AI-Powered Zero Trust SASE platform unifying secure web gateway, CASB, ZTNA, SD-WAN, DLP, and SSPM for enterprises, federal agencies, and MSSPs via a patented containerized cloud architecture.

Ownership category

akta.pro rank

Product category

Cloud Network Security / SASE Platform

NAICS

Software Publishers (513210), Computer Systems Design and Related Services (54151), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Secure Access Service Edge (SASE) & SSE (HDADABAB)

akta.pro secondary industries

Secure Access Service Edge (SASE) & Secure SD-WAN (HDAIAFAH), Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG), Identity & Access Security Services (IAM, PAM, Zero Trust) (BPAKAHAI), Virtualized Security & SASE for Telco Networks (vFW, vDDoS, vSEC, Secure Edge) (HDAIAIAK)

Keywords

• Cloud network security
• Secure access service edge
• Zero trust security
• Cloud access security broker
• Secure web gateway

Headquarters

HQ city

Boston

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations

Revenue model

1. SaaS Subscription (Zero Trust SASE Platform): Subscription-based pricing for the unified SASE platform with tiered packages (Zero Trust Core, Advanced, Complete). Includes various security capabilities based on tier. Add-ons available for additional capabilities like AI-Powered CASB, SSPM+DSPM, Browser Isolation.
2. Hardware Appliances: Physical security appliances (SE-170, Series-8 Gateway 14800, NBC-14 Blade Chassis) for cloud-managed proxy and firewall capabilities. Appliances run full security stack locally.
3. Add-on Modules: Additional paid modules including AI-Powered CASB, SSPM+DSPM, AI Chat Security, Browser Isolation (RBI), Exact Data Match, Enhanced Protective DNS, Digital Experience Management, Microsoft Purview Integration, Long-Term Log Storage, Azure Gateways.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels6 records

Core offering

iboss provides an AI-Powered SASE (Secure Access Service Edge) Platform delivered as a cloud-native SaaS solution that consolidates network security and connectivity functions—including Secure Web Gateway, Zero Trust Network Access, CASB, DLP, Browser Isolation, SD-WAN, and Adaptive Access—into a single platform built on a patented containerized cloud architecture. It targets enterprises, government agencies, defense contractors, financial institutions, healthcare organizations, and educational institutions seeking to replace fragmented legacy security stacks with unified zero trust protection.

Product overview

iboss offers the AI-Powered SASE Platform, a unified cloud-native platform that combines security and networking capabilities. The platform consists of core modules including AI-Powered CASB (signatureless cloud access security with dual risk scoring), Advanced DLP (AI/ML-powered data loss prevention with OCR), Secure Web Gateway (next-gen web security with unlimited throughput), Zero Trust Access/ZTNA (VPN replacement with continuous verification), Browser Isolation (RBI for threat isolation), Zero Trust SD-WAN (unified networking and security), SSPM + DSPM (SaaS and Data Security Posture Management), AI Chat Security (enterprise AI tool monitoring), Malware Defense (multi-layer protection), DNS Security, SSL Decryption, and SIEM Integration. The platform is available in three pricing tiers: Zero Trust Core (essential SASE foundation), Zero Trust Advanced (complete platform with advanced threat protection), and Zero Trust Complete (full enterprise SASE with AI-powered features). Add-on modules include Federal MSSP SASE Platform (FedRAMP authorized), MSSP SASE Platform, Digital Experience Management, Exact Data Match, and AI-Powered CASB upgrades. The platform is built on a patented containerized architecture providing dedicated customer data isolation, and supports cloud-managed physical appliances (SE-170, 14800, NBC-14) for hybrid deployments.

Differentiator

Problem solved

Functional benefit

Brands

• Federal MSSP SASE Platform: A cloud-based security offering designed to help MSSPs deliver CMMC 2.0-compliant cybersecurity solutions to U.S. federal contractors and suppliers
• MSSP SASE Platform

Quantifiable outcome

• 60% reduction in total security costs
• +5 more outcomes

Named customers10 records

Segments7 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration22 records

AI capability13 records

Feature9 records

Partnerships

Four partnerships are on record, tiered core.

• Microsoft (Entra, MIP, Purview, Sentinel, Defender, Copilot)coreTechnology or IntegrationDeep product integrations with Microsoft ecosystem including Entra SSO, Microsoft Information Protection (MIP) labels, Purview inline data discovery, Sentinel log forwarding, Defender for Cloud Apps integration, and Copilot monitoring and DLP.
• CrowdStrikecoreTechnology or IntegrationNative integration with CrowdStrike endpoint detection turning endpoint signals into immediate access control decisions. Infected devices lose access to sensitive resources automatically when CrowdStrike detects threats.
• Azure (AWS, Azure, GCP)coreTechnology or IntegrationSeamless integration with major cloud providers AWS and Azure for secure connectivity and cloud infrastructure protection. Direct site-to-site connectivity and cloud integration included in SD-WAN capabilities.
• SplunkcoreTechnology or IntegrationNative Splunk Enterprise Security integration for enhanced threat detection and investigation. Real-time log streaming with CIM-compliant events and automatic dashboard population.

Scale indicators15 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Zscaler: The category-defining pure-play in cloud-native SASE/SSE, offering ZIA (web/SWG), ZPA (ZTNA), and ZDX. Most directly comparable to iboss across SWG, ZTNA, CASB, and DLP, and the primary competitor iboss benchmarks itself against on cost.
• Palo Alto Networks (Prisma SASE): Prisma SASE combines Prisma Access (SWG, ZTNA, CASB, FWaaS) with Prisma SD-WAN. A direct SASE competitor that bundles into a broader network-security platform and competes for the same enterprise and government accounts as iboss.
• Netskope: SSE/SASE platform centered on cloud-native SWG, CASB, and ZTNA with strong DLP. Directly comparable to iboss's CASB, SWG, and ZTNA modules and competing in similar enterprise and regulated verticals.
• Cato Networks: Cloud-native SASE platform combining SD-WAN, SWG, CASB, ZTNA, and FWaaS in a single managed service. Closely comparable to iboss's converged SASE + Zero Trust SD-WAN offering and competing for mid-market and enterprise consolidation deals.
• Cloudflare (Cloudflare One): Cloudflare One is a SASE platform combining SWG, ZTNA, CASB, RBI, and DLP on a global edge network. Directly comparable to iboss's SASE stack and an emerging challenger in mid-market and enterprise consolidation deals.

Broad incumbents

• Cisco (Secure Access): Umbrella (SWG/DNS) and Cisco Secure Access (ZTNA) integrated with Cisco's networking and security portfolio. A broad incumbent that competes with iboss primarily through bundled enterprise agreements and incumbent Cisco networking relationships.
• Fortinet (FortiSASE / FortiGate): FortiSASE integrates cloud-delivered SWG, ZTNA, CASB, and FWaaS with the FortiGate hardware base. A broad incumbent that competes with iboss especially in enterprises and MSSPs already standardized on Fortinet networking and security.

Emerging players

• Lookout: Lookout Security Service Edge provides SWG, CASB, and ZTNA with a particular emphasis on mobile and endpoint. Comparable to iboss's CASB and SSE modules, particularly in regulated and federal-adjacent accounts.
• Menlo Security: Specialist in browser isolation and Secure Web Gateway, including an SSE platform. Comparable to iboss's Browser Isolation (RBI) and SWG modules, and a potential technology overlap as both push AI-driven detection into the browser session.
• Skyhigh Security: SSE platform built around SWG, CASB, ZTNA, and DLP. Directly comparable to iboss's CASB, SWG, and DLP capabilities, especially in regulated industries where data protection is the primary buying criterion.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/ibosscloud
• YouTubeyoutube.com/iboss
• Facebookfacebook.com/ibosscloud
• LinkedInlinkedin.com/company/iboss
• Instagraminstagram.com/ibosscyber

Compliance8 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles7 records

Funding overview

Funding rounds2 records

Investors3 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about iboss