Tripwire
Tripwire provides enterprise file integrity monitoring, security configuration management, and vulnerability management software, serving 1,600+ regulated organizations across energy, financial services, government, healthcare, and retail as a brand under Fortra, LLC.
- Company typePrivate
- Founded1997
- HeadquartersEden Prairie, United States
- Headcount501–1,000
- GTM typeB2B
- OfferingSoftware
What Tripwire does
Tripwire is a US-based enterprise cybersecurity vendor founded in 1997 by file integrity monitoring (FIM) inventor Marcus Ranum, and now operates as a wholly-owned brand under Fortra, LLC following Fortra's 2015 acquisition. The company provides risk-based security and compliance management solutions centered on three core capabilities: file integrity monitoring and security configuration management (delivered via Tripwire Enterprise), vulnerability management (Tripwire IP360), and log management/SIEM (Tripwire LogCenter), with a managed services wrapper (Tripwire ExpertOps) and a standalone FIM module (Tripwire File Integrity Manager) for lower-tier deployments. Underlying technology combines real-time change detection, the largest compliance policy library in the industry (4,000+ policy/platform combinations covering PCI DSS, SOX, FISMA, HIPAA, ISO 27001, NERC CIP, CIS Controls, GDPR, and MITRE ATT&CK), and the VERT in-house vulnerability research team that feeds IP360's risk-scoring engine. The platform supports agentless and agent-based scanning across on-premises, cloud, and container-based assets in both IT and OT environments.
Tripwire generates revenue through enterprise software licensing (Tripwire Enterprise, IP360, LogCenter) sold on annual subscriptions, supplemented by the ExpertOps managed services subscription, professional services for implementation and advisory engagements, and training/certification programs. Go-to-market is enterprise field sales with personalized demos, inside sales handling inbound quote requests, and a partner/reseller channel for global reach. The company serves 1,600+ customers worldwide across five primary verticals: energy and utilities (including NERC CIP-regulated cooperatives and Fortune-class energy companies), financial services (banks, payment processors), government and defense (federal and military agencies), healthcare, and retail. Notable enterprise customers include Verifone, Walgreens, Rabobank, AAA, the State of Minnesota, and a U.S. military agency, with integrations spanning ServiceNow, Splunk, JIRA, Active Directory, and IBM Power Systems. Headcount is 501-1000 employees and the company is headquartered in Eden Prairie, Minnesota, with localized presence in Japan and operations across North America, Europe, and Asia Pacific.
Tripwire firmographics
Firmographics- Name
- Tripwire
- Legal name
- Fortra, LLC
- Website
- https://tripwire.com
- Company type
- Private
- Founded year
- 1997
- Operating status
- Operating
- Headcount range
- 501–1,000 employees
- Short description
- Tripwire provides enterprise file integrity monitoring, security configuration management, and vulnerability management software, serving 1,600+ regulated organizations across energy, financial services, government, healthcare, and retail as a brand under Fortra, LLC.
- Ownership category
- akta.pro rank
Where Tripwire is headquartered
LocationHeadquarters
- HQ city
- Eden Prairie
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
Tripwire business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure
Revenue model
- Software Licenses (Tripwire Enterprise, IP360, LogCenter): Enterprise software solutions sold as licenses for file integrity monitoring, security configuration management, and vulnerability management. Includes both perpetual and subscription licensing options.
- Tripwire ExpertOps Managed Services: Cloud-based managed services model providing personalized consulting, hands-on tool management, and dedicated expert support. Offered as a subscription service with simple pricing and low total cost of ownership.
- Professional Services: Consulting services including professional services for implementations and upgrades, resident engineers, and Tripwire Advisory Services subscription.
- Training and Certification: Training services including instructor-led, self-study, and custom programs for Tripwire product certification.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise software licensing with flexible deployment options |
| Subscription | Annual | ExpertOps managed services with subscription pricing |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels6 records
Tripwire product offering
Product offeringCore offering
Tripwire provides risk-based security and compliance management solutions for enterprises, delivering file integrity monitoring (FIM), security configuration management (SCM), and vulnerability management through its Tripwire Enterprise, IP360, LogCenter, and ExpertOps product lines. The offerings detect unauthorized system changes, automate compliance with regulations such as PCI DSS, SOX, HIPAA, FISMA, NERC CIP, and ISO 27001, and prioritize vulnerabilities across IT and OT environments.
Product overview
Tripwire is a cybersecurity platform consisting of four core integrated products. Tripwire Enterprise serves as the flagship file integrity monitoring (FIM) and security configuration management (SCM) solution, providing real-time change detection and automated compliance across IT and OT environments. Tripwire IP360 delivers vulnerability management with prioritized risk scoring and comprehensive asset discovery. Tripwire LogCenter provides centralized log management and SIEM capabilities with correlation-based threat detection. Tripwire ExpertOps offers managed services delivery of these capabilities via cloud-based subscription. Tripwire File Integrity Manager is available as a standalone FIM module for organizations requiring core change monitoring without full Enterprise functionality. The products integrate with each other and with enterprise tools like Splunk, ServiceNow, and Active Directory.
Differentiator
Problem solved
Functional benefit
Brands
- Tripwire Enterprise: The industry's leading file integrity monitoring (FIM) and security configuration management (SCM) solution providing real-time change intelligence and threat detection.
- Tripwire IP360
- Tripwire LogCenter
- Tripwire ExpertOps
- Tripwire File Integrity Manager
Quantifiable outcome
- Reduction of audit cycles and cost through automated compliance evidence
- +1 more outcomes
Companies that use Tripwire
Customer profileNamed customers12 records
Segments6 records
Ideal customer profiles5 records
Tripwire technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration7 records
AI capability1 record
Feature7 records
Tripwire partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered core and flagship.
- ServiceNowcoreServiceNow integration enables Tripwire Enterprise to automatically reconcile detected changes against tickets and requests from change management systems, streamlining IT operations and security workflows.
- SplunkcoreTripwire Enterprise integrates with Splunk through REST APIs, allowing customers to incorporate change intelligence data into their existing Splunk workflows and security analytics.
- Active DirectorycoreIntegration with Active Directory or preferred IDP minimizes administrative overhead and human error by auto-creating users, groups, and roles for efficient access management.
- JIRAcoreTripwire Enterprise REST APIs integrate into JIRA workflows, enabling security and development teams to coordinate on change management and vulnerability remediation.
- IBMcoreTripwire Enterprise provides advanced cybersecurity for IBM i operating on IBM Power Servers, protecting business-critical activities in retail, banking, healthcare, and other sectors.
- FortraflagshipTripwire is part of Fortra's comprehensive cybersecurity portfolio, simplifying the complex cybersecurity landscape by bringing complementary products together in innovative ways. Fortra is Tripwire's parent company.
Scale indicators4 records
Recent moves6 records
Expansion highlights6 records
Tripwire competitors and assessment
Company assessmentDirect peers
- Tenable: Tenable is a leading vulnerability management platform (Nessus, Tenable One) directly competing with Tripwire IP360 in enterprise vulnerability and exposure management, serving overlapping regulated verticals.
- Qualys: Qualys offers cloud-based vulnerability management, compliance, and asset inventory solutions that overlap directly with Tripwire's IP360 and policy compliance library offerings.
- Rapid7: Rapid7's InsightVM provides vulnerability risk prioritization and analytics directly comparable to Tripwire IP360, serving enterprise security teams across similar compliance-driven use cases.
- Tanium: Tanium provides real-time endpoint visibility, configuration management, and vulnerability assessment that directly overlap with Tripwire Enterprise's change detection and compliance enforcement value proposition.
- Ivanti: Ivanti's Neurons platform combines vulnerability management, configuration management, and IT asset visibility that overlap with Tripwire Enterprise's SCM and IP360 offerings for enterprise IT environments.
- LogRhythm: LogRhythm provides SIEM and log management solutions directly comparable to Tripwire LogCenter, targeting enterprise security operations centers with similar correlation and threat detection capabilities.
Broad incumbents
- CrowdStrike: CrowdStrike Falcon offers endpoint, vulnerability, and configuration management as part of a much broader XDR/security platform, increasingly competing with Tripwire's FIM and SCM capabilities at the endpoint layer.
- Splunk: Splunk is both a Tripwire integration partner and a broad security/observability incumbent that competes indirectly with Tripwire LogCenter and could absorb adjacent FIM/SCM workloads at large enterprises.
Emerging players
- BeyondTrust: BeyondTrust specializes in privileged access management and vulnerability management, offering overlapping capabilities with Tripwire around configuration, compliance, and asset visibility for enterprise customers.
- ManageEngine (Zoho): ManageEngine offers vulnerability management, configuration compliance, and log management as part of a broader IT management suite, competing with Tripwire at the mid-market/enterprise boundary on price-sensitive accounts.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key highlights7 records
Customer concentration
Tripwire social profiles
Digital presenceTripwire compliance and trust
Trust signalCompliance8 records
Tripwire financial estimates
Financial estimateRevenue estimate
Valuation estimate
Tripwire leadership team
Management profileNumber of profiles
Tripwire funding detail
Funding detailFunding overview
Funding rounds4 records
Investors10 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Tripwire M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Tripwire
What does Tripwire do?
Tripwire provides risk-based security and compliance management solutions for enterprises, delivering file integrity monitoring (FIM), security configuration management (SCM), and vulnerability management through its Tripwire Enterprise, IP360, LogCenter, and ExpertOps product lines. The offerings detect unauthorized system changes, automate compliance with regulations such as PCI DSS, SOX, HIPAA, FISMA, NERC CIP, and ISO 27001, and prioritize vulnerabilities across IT and OT environments.
Is Tripwire a public or private company?
Tripwire is a private company. It is classified as corporate owned and is currently operating.
When was Tripwire founded?
Tripwire was founded in 1997. It employs 501 to 1,000 people.
Where is Tripwire based?
Tripwire is headquartered in Eden Prairie, United States, in the North America region.
How does Tripwire make money?
Four revenue lines are on record. Software Licenses (Tripwire Enterprise, IP360, LogCenter) is the primary driver. The others are tripwire ExpertOps Managed Services, professional Services and training and Certification.
Who are Tripwire's main competitors?
Direct peers on record are Tenable, Qualys, Rapid7, Tanium, Ivanti and LogRhythm. Broad incumbents are CrowdStrike and Splunk. Emerging players are BeyondTrust and ManageEngine (Zoho).
Does Tripwire have an API?
Yes. Tripwire Enterprise offers REST APIs that integrate into the workflows of existing business processes and tools. The open APIs facilitate integration with IT systems such as help desk, SIEM, asset management, and more. Tripwire IP360 also features open APIs for integrating vulnerability management with help desk and asset management solutions.