Corero Network Security
Corero Network Security provides real-time, inline DDoS protection through its SmartWall ONE platform, serving telecommunications operators, hosting providers, and digital enterprises across 50 countries via subscription, managed services, and channel partners.
- Company typePublic
- Founded2010
- HeadquartersMarlborough, United States
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What Corero Network Security does
Corero Network Security plc is a publicly listed cybersecurity company specializing in real-time, inline Distributed Denial of Service (DDoS) protection, incorporated in England and Wales in 2010 and listed on the London Stock Exchange AIM (ticker: CNS) and US OTCQX (ticker: DDoSF). Headquartered in London with primary engineering in Edinburgh and a US operational center in Marlborough, MA, the company employs approximately 80 people globally and serves customers in roughly 50 countries. Its core focus is automated, sub-second detection and mitigation of DDoS attacks at the network edge, targeting telecommunications operators, internet service providers, hosting providers, and digital enterprises facing escalating AI-driven and multi-vector attack campaigns.
The company's product architecture centers on the SmartWall ONE platform, which performs line-rate packet inspection across Layers 3-7 and mitigates attacks inline without diverting traffic to remote scrubbing centers. The broader portfolio includes the CORE cyber resiliency platform (combining DDoS protection, traffic visibility, Zero Trust Admission Control, and managed services), SecureWatch 24/7 managed services, the SmartWall Threat Defense Director for centralized management and Juniper MX integration, and the Web Application and API Protection (WAAP) module co-developed with TierPoint. The platform now incorporates AI-driven detection for encrypted application-layer attacks and integrates with hyperscale cloud DDoS providers (notably Akamai) for hybrid deployments.
Corero operates a channel-first go-to-market model, scaled by a dedicated Global Channel Chief and supported by strategic technology partners including Juniper Networks (which also holds a 9.6% equity stake), Akamai, GTT, and Tech Mahindra. Revenue is generated through subscription/ARR contracts, DDoS Protection-as-a-Service licensing to service providers, and software licenses with support, sold via multi-year enterprise agreements (e.g., $1.1 million three-year contract with TierPoint) and managed service arrangements. Reported ARR reached $23.9 million in 2025, up 23% year-over-year, with order intake of $33.8 million reflecting 20% growth. The company is led by CEO Carl Herberger and overseen by founder/Chairman Jens Montanana, who holds a 36.57% stake through related entities.
Corero Network Security firmographics
Firmographics- Name
- Corero Network Security
- Legal name
- Corero Network Security plc
- Website
- https://corero.com
- Company type
- Public
- Founded year
- 2010
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- Corero Network Security provides real-time, inline DDoS protection through its SmartWall ONE platform, serving telecommunications operators, hosting providers, and digital enterprises across 50 countries via subscription, managed services, and channel partners.
- Ownership category
- akta.pro rank
Corero Network Security industry classification
Industry- Product category
- DDoS Protection Software
- NAICS
- Security Systems Services (except Locksmiths) (561621), Security Systems Services (56162), Computer Systems Design and Related Services (5415)
- SIC
- Measuring & Controlling Devices, Nec (3829)
- akta.pro primary industry
- Edge Security Delivery (DDoS, WAF, Bot Mitigation at Edge) (HDABAGAH)
- akta.pro secondary industry
- Intrusion Prevention/Detection Systems (IPS/IDS) (HDADABAH)
Keywords
Where Corero Network Security is headquartered
LocationHeadquarters
- HQ city
- Marlborough
- HQ country
- United States
- HQ region
- North America
Offices3 records
Markets served
Corero Network Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Subscription/ARR Revenue: Annual Recurring Revenue from subscription-based DDoS protection offerings and DDoS Protection-as-a-Service. Corero reported 23% ARR growth to $23.9 million in 2025, driven by shift to subscription and managed service models.
- DDoS Protection-as-a-Service: Service providers and telcos use Corero technology to deliver DDoS Protection-as-a-Service to enterprise and consumer customers, generating recurring revenue streams through channel partners.
- Software Licenses and Support: SmartWall ONE software subscriptions and service purchase agreements including Equipment and Service Purchase Agreement, Software Subscription and Service Purchase Agreement, and SecureWatch Managed Service Agreement.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Multi-year contract | Enterprise DDoS Protection - Custom Pricing |
| Subscription | Monthly | DDoS Protection-as-a-Service |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels6 records
Corero Network Security product offering
Product offeringCore offering
Corero Network Security provides real-time, automatic DDoS protection through its SmartWall ONE platform, delivering line-rate packet inspection across Layers 3-7 with always-on, inline deployment that eliminates the need for traffic diversion to remote scrubbing centers. The company also offers the CORE cyber resiliency platform (including WAAP), SecureWatch managed services, and SmartWall Threat Defense Director (TDD) for centralized management, enabling service providers, hosting providers, and enterprises to protect their networks and deliver DDoS Protection-as-a-Service.
Product overview
Corero Network Security offers a platform-plus-modules architecture centered on the SmartWall ONE™ DDoS protection platform. The CORE platform serves as the overarching cyber resiliency framework combining DDoS protection, real-time traffic visibility, Zero Trust Admission Control, and fully managed services. The product portfolio includes the SmartWall ONE core platform (available as on-premises hardware/virtual appliance or hybrid deployment), the SecureWatch managed services suite, the SmartWall Threat Defense Director (TDD) for centralized management, Web Application Security (WAAP) as part of the CORE platform, and DDoS Protection-as-a-Service for service provider resale. The platform provides automatic attack detection and line-rate packet inspection across Layers 3-7, with capabilities including TLS protection for encrypted traffic, AI-driven threat detection, and integration options for hybrid environments.
Differentiator
Problem solved
Functional benefit
Brands
- SmartWall ONE™: Primary DDoS protection platform providing real-time, automatic attack detection and mitigation with network visibility, analytics, and reporting.
- CORE
- SecureWatch
Products and services
- SmartWall ONE™ Flagship DDoS protection platform providing real-time, automatic attack detection and mitigation across Layers 3-7 with line-rate packet inspection. Supports on-premises, hybrid, and cloud deployment options with scalability up to 100 Gbps.
- CORE Cyber Resiliency Platform combining DDoS protection, real-time traffic visibility, Zero Trust Admission Control, and fully managed services. Encompasses the WAAP product co-developed with TierPoint.
- SecureWatch Fully managed DDoS protection service providing 24/7 monitoring, threat analysis, and incident response. Part of the managed services portfolio that ensures continuous service availability.
- Web Application Security (WAAP) Web Application and API Protection (WAAP) solution co-developed with TierPoint, extending DDoS protection capabilities to include application-layer security. Part of the CORE platform offering, representing new non-DDoS revenue opportunities.
- SmartWall Threat Defense Director (TDD) Central management system for SmartWall ONE that provides detection engine, defense director, and management server capabilities. Designed for Juniper MX Router integration with ephemeral configuration, traffic telemetry, and firewall filters.
- DDoS Protection-as-a-Service Service model enabling service providers to offer DDoS protection to their customers, leveraging the SmartWall ONE platform to deliver always-on detection and mitigation capabilities.
Quantifiable outcome
- Mitigation time reduced from 6 minutes to 18 seconds for TierPoint customers
- +5 more outcomes
Companies that use Corero Network Security
Customer profileNamed customers12 records
Segments5 records
Ideal customer profiles4 records
Corero Network Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability4 records
Feature6 records
Corero Network Security partnerships and signals
Strategic signalScale indicators8 records
Recent moves6 records
Expansion highlights6 records
Corero Network Security competitors and assessment
Company assessmentDirect peers
- Radware: Radware is a direct DDoS and network security competitor offering inline and cloud-scrubbing DDoS protection, ADC, and WAAP. Comparable to Corero across enterprise and service provider segments; Corero CEO Carl Herberger previously held executive roles at Radware.
- NETSCOUT Systems (Arbor Networks): NETSCOUT's Arbor division is a market-leading DDoS protection vendor serving Tier-1 service providers and enterprises with both inline and cloud-scrubbing solutions. Closest direct peer to Corero in telco-grade inline DDoS mitigation.
- A10 Networks: A10 Networks provides Thunder TPS DDoS protection appliances and 5G security solutions aimed at service providers and enterprises. Direct competitor to Corero in the inline appliance category.
- Allot Communications: Allot provides network intelligence, traffic management, and DDoS mitigation solutions primarily to telecom operators. Comparable to Corero's telco/ISP customer segment and DPI-based mitigation approach.
Broad incumbents
- Akamai Technologies: Akamai's Prolexic platform is a top-tier cloud DDoS scrubbing service and a strategic channel partner of Corero (hybrid on-prem + cloud deployments). Larger incumbent that overlaps heavily in WAAP and edge security but covers a much broader portfolio.
- F5 (NGINX): F5 (post-Shape/NGINX acquisitions) provides application delivery, WAAP, and bot/DDoS defenses to enterprises. A broader incumbent that competes in the WAAP and ADC categories where Corero is now extending.
- Cloudflare: Cloudflare's Magic Transit and Advanced DDoS Protection offer always-on network-layer DDoS defense globally. A dominant cloud-scrubbing incumbent that competes for the same enterprise and SaaS customer budgets.
- Fastly: Fastly's edge cloud platform includes Next-Gen WAF and DDoS protection at the edge, comparable in coverage scope to Corero's SmartWall ONE inline approach. A broader edge-cloud incumbent.
- Juniper Networks: Juniper is both a 9.6% strategic shareholder and technology integration partner (SmartWall Threat Defense Director on Juniper MX routers). As a major routing and security vendor, it is a partial competitor and partner in telco deployments.
Emerging players
- Nexusguard: Nexusguard is a DDoS protection specialist offering cloud-based scrubbing and Origin Protection. Smaller niche competitor overlapping with Corero in service-provider-led DDoS Protection-as-a-Service offerings.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Corero Network Security social profiles
Digital presenceCorero Network Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Corero Network Security leadership team
Management profileNumber of profiles
Profiles13 records
Corero Network Security subsidiaries and ownership
Company hierarchySubsidiaries1 record
Corero Network Security funding detail
Funding detailFunding overview
Funding rounds6 records
Investors13 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Corero Network Security M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Corero Network Security
What does Corero Network Security do?
Corero Network Security provides real-time, automatic DDoS protection through its SmartWall ONE platform, delivering line-rate packet inspection across Layers 3-7 with always-on, inline deployment that eliminates the need for traffic diversion to remote scrubbing centers. The company also offers the CORE cyber resiliency platform (including WAAP), SecureWatch managed services, and SmartWall Threat Defense Director (TDD) for centralized management, enabling service providers, hosting providers, and enterprises to protect their networks and deliver DDoS Protection-as-a-Service.
Is Corero Network Security a public or private company?
Corero Network Security is a public company. It is classified as public and is currently operating.
When was Corero Network Security founded?
Corero Network Security was founded in 2010. It employs 101 to 250 people.
Where is Corero Network Security based?
Corero Network Security is headquartered in Marlborough, United States, in the North America region.
How does Corero Network Security make money?
Three revenue lines are on record. Subscription/ARR Revenue is the primary driver. The others are DDoS Protection-as-a-Service and software Licenses and Support.
Who are Corero Network Security's main competitors?
Direct peers on record are Radware, NETSCOUT Systems (Arbor Networks), A10 Networks and Allot Communications. Broad incumbents are Akamai Technologies, F5 (NGINX), Cloudflare, Fastly and Juniper Networks. Nexusguard is listed as an emerging player.
Does Corero Network Security have an API?
Yes. SmartWall ONE supports configuration via REST API. The platform offers multiple configuration methods including CLI, UI, and REST. The REST API enables programmatic management of SmartWall ONE systems for policy administration and centralized management.
What industry is Corero Network Security in?
Corero Network Security's product category is DDoS Protection Software. Its primary akta.pro industry code is HDABAGAH, Edge Security Delivery (DDoS, WAF, Bot Mitigation at Edge), with a secondary code of HDADABAH, Intrusion Prevention/Detection Systems (IPS/IDS). Its NAICS code is 561621 and its SIC code is 3829.