DFLabs
DFLabs developed a SOAR platform for intelligence-driven security operations and incident response, serving enterprise security teams. Founded in 2004 in Milano, Italy, the company raised approximately $9M from Evolution Equity Partners across 2016 and 2018.
- Company typePrivate
- Founded2004
- HeadquartersMilano, Italy
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What DFLabs does
DFLabs developed a Security Orchestration, Automation, and Response (SOAR) platform intended to facilitate intelligence-driven security operations and incident response, targeting enterprise security teams seeking to automate triage, enrichment, and response workflows. The company was founded in 2004 and headquartered in Milano, Italy, operating as a private for-profit entity with a headcount band of 11–50 employees. Over its operating life, DFLabs raised approximately $9 million across two disclosed funding rounds in 2016 ($5.5M) and 2018 ($3.5M), both led by Evolution Equity Partners, indicating a single-institution capital structure.
The company's go-to-market structure appears to have combined a product sale motion with professional services deployment support, based on leadership roles including a Senior Director of Professional Services (Mike Fowler) and a country-level Sales Director for Italy (Ivo Simoni). The company was led by CEO Dario Forte, a recognized figure in the incident response community. Despite the relatively niche SOAR positioning, the firm secured repeat backing from a cybersecurity-specialist investor, suggesting credible product-market fit during its active funding period.
A material data gap exists: the dflabs.com domain is currently listed for sale as a premium domain via Dan.com at a $14,000 asking price, with no corporate website content, product documentation, or active digital presence available. No acquisition announcement, winding-up filing, or successor entity is documented in the provided sources. As a result, the company's current operating status cannot be definitively confirmed from the input data, though the absence of post-2018 funding activity and the active domain divestiture listing strongly suggest the entity is no longer operating under its original configuration.
DFLabs firmographics
Firmographics- Name
- DFLabs
- Website
- https://dflabs.com
- Company type
- Private
- Founded year
- 2004
- Operating status
- Closed
- Headcount range
- 11–50 employees
- Short description
- DFLabs developed a SOAR platform for intelligence-driven security operations and incident response, serving enterprise security teams. Founded in 2004 in Milano, Italy, the company raised approximately $9M from Evolution Equity Partners across 2016 and 2018.
- Ownership category
- akta.pro rank
DFLabs industry classification
Industry- Product category
- Security Orchestration, Automation and Response (SOAR)
- NAICS
- Computer Systems Design and Related Services (5415), Computer Systems Design Services (541512)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- SOAR & Security Automation (HDADAGAB)
- akta.pro secondary industry
- Threat Intelligence Platforms (TIP) (HDADAGAD)
Keywords
Where DFLabs is headquartered
LocationHeadquarters
- HQ city
- Milano
- HQ country
- Italy
- HQ region
- Europe
Markets served
DFLabs business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations
DFLabs product offering
Product offeringCore offering
DFLabs develops a Security Orchestration, Automation and Response (SOAR) platform that facilitates intelligence-driven security operations and incident response. The platform enables enterprise security teams to automate detection, investigation, and remediation workflows across their security infrastructure.
Product overview
No product information available in the provided sources. The available source data contains only a domain for sale listing for dflabs.com and a market news article referencing the broader cyber security industry.
Differentiator
Problem solved
Functional benefit
Products and services
- SOAR Platform
Companies that use DFLabs
Customer profileIdeal customer profiles1 record
DFLabs technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
DFLabs partnerships and signals
Strategic signalRecent moves3 records
Expansion highlights2 records
DFLabs competitors and assessment
Company assessmentBroad incumbents
- Palo Alto Networks (Cortex XSOAR): Palo Alto Networks acquired Demisto in 2019 and now sells Cortex XSOAR, the market-leading SOAR platform. It is directly comparable to DFLabs as a SOAR vendor for intelligence-driven security operations and incident response, but operates at vastly larger scale and as part of a broad cybersecurity portfolio.
- Splunk SOAR (formerly Phantom): Splunk's SOAR product (originally Phantom Security) is a foundational SOAR platform serving enterprise SOCs with orchestration, automation, and incident response capabilities. It directly competes with DFLabs in the SOAR category, but is delivered as part of Splunk's much broader data and security portfolio.
- Rapid7 (InsightConnect): Rapid7 sells InsightConnect, a SOAR/automation product, alongside its broader detection, vulnerability management, and SIEM portfolio. It competes directly with DFLabs for SOAR budgets in mid-market and enterprise security teams.
- ServiceNow Security Operations: ServiceNow's Security Incident Response and Vulnerability Response modules deliver SOAR-adjacent orchestration and automation capabilities, often displacing standalone SOAR vendors like DFLabs in enterprises that standardize on the ServiceNow platform.
- IBM Security (Resilient / QRadar SOAR): IBM Security's Resilient SOAR (now part of QRadar Suite) is a long-standing direct competitor to DFLabs in incident response orchestration, particularly in large enterprise and regulated-industry deployments.
Direct peers
- Tines: Tines is a no-code security workflow automation platform purpose-built for SOC and incident response teams, directly comparable to DFLabs as a focused SOAR alternative for intelligence-driven operations. Tines has rapidly gained traction against incumbent SOAR vendors, representing the modern competitive pressure on legacy players like DFLabs.
- Torq (formerly Demisto competitor): Torq is a hyperautomation-focused SOAR platform for security operations teams, directly competing with DFLabs in intelligent security orchestration and incident response. It represents a newer, well-funded direct peer that has displaced several legacy SOAR vendors in enterprise accounts.
- Swimlane: Swimlane is a SOAR platform focused on security operations automation and incident response, directly comparable to DFLabs in product scope and target buyer (SOC and incident response teams). Like DFLabs, Swimlane has emphasized low-code automation and intelligence-driven workflows.
Emerging players
- Sumo Logic (CrowdStrike SOAR via LogicHub-style integrations): Sumo Logic and adjacent cloud-native SIEM/XDR vendors increasingly bundle SOAR-style automation, competing with DFLabs in intelligence-driven SecOps for cloud-first and SaaS-centric security teams.
Regional players
- LogRhythm (LogRhythm Axon / RespondX): LogRhythm provides SIEM with embedded SOAR-style response automation, comparable to DFLabs as a platform serving SOC operations. Particularly relevant in EMEA where DFLabs is headquartered, competing for the same mid-market and European enterprise buyers.
Market position
Strengths3 records
Weaknesses4 records
Competitive moat2 records
Key risks5 records
Key highlights4 records
Customer concentration
DFLabs social profiles
Digital presenceDFLabs financial estimates
Financial estimateRevenue estimate
Valuation estimate
DFLabs leadership team
Management profileNumber of profiles
Profiles4 records
DFLabs funding detail
Funding detailFunding overview
Funding rounds2 records
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
DFLabs M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about DFLabs
What does DFLabs do?
DFLabs develops a Security Orchestration, Automation and Response (SOAR) platform that facilitates intelligence-driven security operations and incident response. The platform enables enterprise security teams to automate detection, investigation, and remediation workflows across their security infrastructure.
Is DFLabs a public or private company?
DFLabs is a private company. It is classified as venture growth investor backed and is currently closed.
When was DFLabs founded?
DFLabs was founded in 2004. It employs 11 to 50 people.
Where is DFLabs based?
DFLabs is headquartered in Milano, Italy, in the Europe region.
Who are DFLabs's main competitors?
Broad incumbents on record are Palo Alto Networks (Cortex XSOAR), Splunk SOAR (formerly Phantom), Rapid7 (InsightConnect), ServiceNow Security Operations and IBM Security (Resilient / QRadar SOAR). Direct peers are Tines, Torq (formerly Demisto competitor) and Swimlane. Sumo Logic (CrowdStrike SOAR via LogicHub-style integrations) is listed as an emerging player. LogRhythm (LogRhythm Axon / RespondX) is listed as a regional player.
Does DFLabs have an API?
No public API is recorded for DFLabs.
What industry is DFLabs in?
DFLabs's product category is Security Orchestration, Automation and Response (SOAR). Its primary akta.pro industry code is HDADAGAB, SOAR & Security Automation, with a secondary code of HDADAGAD, Threat Intelligence Platforms (TIP). Its NAICS code is 5415 and its SIC code is 7372.