Twistlock

What Twistlock does

Twistlock is a cloud-native cybersecurity company founded in 2015 and headquartered in Portland, Oregon, that built container and Kubernetes security capabilities for modern enterprises operating public cloud workloads. The company was acquired by Palo Alto Networks in 2019 and its technology now forms a core component of Palo Alto Networks' Prisma Cloud Cloud Native Application Protection Platform (CNAPP), which delivers cloud security posture management (CSPM), cloud workload protection (CWPP), cloud infrastructure entitlement management (CIEM), and Cloud Detection and Response (CDR). Twistlock's runtime defense, vulnerability management, and compliance capabilities for containers, Kubernetes, and serverless environments are bundled into a broader Prisma Cloud portfolio sold via enterprise field sales, channel partners, and cloud marketplaces (AWS Marketplace, Azure Marketplace).

The combined platform is monetized primarily through recurring subscriptions for cloud-delivered security services, platform subscriptions for Cortex, Prisma, and now Idira identity security, and to a lesser extent hardware/virtual firewall appliances and managed services such as Unit 42 incident response. Customers are predominantly large enterprises and cloud-native organizations across highly diversified verticals — financial services, healthcare, manufacturing, retail, government, and energy — with parent-level claims of 95% of the Fortune 100 using the network security platform and 55% of the Fortune 500 using the Idira identity security platform. Pricing is quote-based and varies by deployment scale, product suite, and term length. As a wholly-owned subsidiary, Twistlock's leadership includes Brendan Hannigan (Chairman), Jean Compeau (Chief Accounting Officer), and Etti Hanochi (Acting CFO), and the unit has 51-100 employees with no separate funding rounds since its 2018 Series C, reflecting its operating model as a product line within Palo Alto Networks (NYSE: PANW).

Name

Twistlock

Legal name

Palo Alto Networks, Inc.

Website

https://paloaltonetworks.com

Company type

Public

Founded year

2005

Operating status

Operating

Headcount range

51–100 employees

Short description

Twistlock is a cloud-native cybersecurity company (founded 2015, Portland) that built container and Kubernetes security for modern enterprises. Acquired by Palo Alto Networks in 2019, its technology now anchors the Prisma Cloud CNAPP platform sold to large global enterprises.

Ownership category

akta.pro rank

Product category

Cloud Native Security

NAICS

Computer Systems Design and Related Services (5415), Computer Systems Design and Related Services (54151)

akta.pro primary industry

Cloud Security Managed Services (CSPM/CWPP/CNAPP) (BPAEADAF)

akta.pro secondary industries

Cybersecurity Architecture & Security Integration (BPAEAAAL), Secrets Management & Credential Security (HDADACAH)

Keywords

• Cloud native cybersecurity
• Container security
• Cloud workload protection
• Runtime defense
• Vulnerability management

Headquarters

HQ city

Portland

HQ country

United States

HQ region

North America

Offices6 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Hardware and Virtual Firewall Appliances: Sale of physical PA-Series NGFW appliances, VM-Series virtual firewalls, CN-Series containerized firewalls for enterprise deployments
2. Security Subscriptions: Annual subscriptions for cloud-delivered security services including Advanced Threat Prevention, WildFire, URL Filtering, DNS Security, Enterprise DLP, IoT Security
3. Platform Subscriptions: Subscriptions for Cortex, Prisma Cloud, Prisma Access, Prisma SASE platforms providing security operations, cloud security, and secure access
4. Identity Security Subscriptions: Idira platform subscriptions for privileged access management, secrets management, and identity governance
5. Support and Professional Services: Technical support contracts, Unit 42 incident response retainers, professional services, and training certifications

Go-to-market motion3 records

Distribution channels6 records

Marketing channels13 records

Core offering

Twistlock provides cloud native cybersecurity for the modern enterprise, focused on protecting containerized applications and cloud-native workloads. The company was founded in 2015, headquartered in Portland, United States, and built a team of 51-100 employees before being integrated into Palo Alto Networks.

Product overview

Palo Alto Networks offers a comprehensive cybersecurity portfolio organized into five main platforms: the Strata Network Security Platform (NGFW, PAN-OS, Panorama, Strata Cloud Manager), Cortex Security Operations Platform (Cortex XDR, XSOAR, XSIAM, Xpanse, Cortex Cloud), Prisma Cloud (cloud native security), Prisma SASE (secure access), and Idira Identity Security Platform. These platforms work together to provide AI-powered protection across network, cloud, endpoint, and identity environments. The company also offers specialized security services including WildFire malware protection, Advanced Threat Prevention, Advanced URL Filtering, Advanced DNS Security, Enterprise DLP, IoT Security, and SaaS Security. Cloud-delivered products include VM-Series, CN-Series for containers, Cloud NGFW for AWS and Azure, Prisma Access, Prisma Browser, and Prisma SD-WAN. The Unit 42 threat research team provides threat intelligence and incident response services.

Differentiator

Problem solved

Functional benefit

Brands

• Strata: Network Security Platform powered by Precision AI
• Cortex
• Prisma
• Idira
• Unit 42
• PAN-OS
• WildFire
• GlobalProtect

Products and services

• Cloud Native Cybersecurity Platform Cloud native cybersecurity solution for the modern enterprise, providing protection for containerized applications and cloud-native workloads.

Quantifiable outcome

• 90% reduction in MTTR (Mean Time To Respond)
• +7 more outcomes

Named customers22 records

Segments8 records

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability8 records

Feature7 records

Partnerships

Six partnerships are on record, tiered core and flagship.

• 200+ Alliance PartnerscoreTechnology or IntegrationExtensive technology alliance ecosystem with over 200 partners providing integrations across the Palo Alto Networks platform portfolio
• 300+ Integration PartnerscoreTechnology or IntegrationIdira identity security platform has over 300 out-of-the-box integrations for enterprise deployment
• AWSflagshipTechnology or IntegrationCloud NGFW for AWS - NGFW managed by Palo Alto Networks and procured in AWS marketplace. VM-Series available on AWS. Native integration with AWS Firewall Manager, CloudWatch, Kinesis Firehose.
• AzureflagshipTechnology or IntegrationCloud NGFW for Azure - firewall as a service built for Azure with no infrastructure management. Native Azure integration.
• Google CloudcoreTechnology or IntegrationVM-Series integration with Google Cloud Platform. Network Security Integration (NSI) for VM-Series in GCP environments.
• VMwarecoreTechnology or IntegrationVM-Series integration with VMware NSX-T for east-west and north-south traffic inspection in virtualized data centers.

Scale indicators20 records

Recent moves6 records

Expansion highlights6 records

Market position

Competitive moat6 records

Key highlights5 records

Customer concentration

• Xx.com/twistlockteam
• YouTubeyoutube.com/user/paloaltonetworks
• Facebookfacebook.com/twistlockteam
• LinkedInlinkedin.com/company/9440582

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Subsidiaries2 records

Funding overview

Funding rounds5 records

Investors7 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Twistlock