Mira Security
Mira Security builds encrypted traffic orchestration appliances that decrypt SSL/TLS and SSH traffic so enterprise security tools — NDR, IDS, SIEM, and forensics — can inspect threats hidden inside encrypted flows. Acquired by Darktrace in July 2025.
- Company typePrivate
- Founded2012
- HeadquartersCranberry, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Mira Security does
Mira Security is a US-domiciled enterprise cybersecurity vendor founded in 2012 that builds Encrypted Traffic Orchestration (ETO) platforms to decrypt SSL/TLS and SSH network traffic so that downstream security tools — IDS, NDR, SIEM, and forensic systems — regain visibility into encrypted flows. Its product line spans physical hardware appliances (Medium, Large, and Extra Large Decryptor Series scaling from sub-1 Gbps branch office deployments to 100 Gbps data center links), a virtual appliance (vETO) for VMware ESXi, KVM, and Proxmox environments, a cloud-native edition for AWS compatible with Gateway Load Balancer, and a separate Central Manager license that administers up to 100 ETO nodes across on-premises and cloud deployments. The underlying technology detects and decrypts SSL v3 through TLS 1.3 plus SSHv2, operates transparently in inline or passive modes, and enforces policy-based selective decryption to balance compliance and visibility. Mira is a Delaware corporation with engineering labs in Pittsburgh and Centurion (South Africa), a UK registered office in London, and engineering/legal presence in South Africa; the legal entity Mira Security (Pty) Ltd is the South African arm.
Mira monetizes through quote-based enterprise contracts combining hardware appliance sales with 12 or 36-month software subscriptions, tiered vETO subscriptions (0.5–5 Gbps), hourly or BYOL consumption via AWS Marketplace, and professional services for implementation and support. Go-to-market is primarily channel-led: Garland Technology holds an exclusive worldwide distribution partnership (upgraded from a May 2024 master agreement), supplemented by VARs and system integrators (Braxton-Grant, mnemonic, NetTects, Passus, Zenith Defense) and OEM partners, with direct enterprise field sales reserved for proof-of-value engagements. Customer segments span general enterprise, U.S. Department of Defense and government/defense, healthcare, and financial services, with technology integrations across Darktrace, Trellix, Lumu, Axellio, Stamus, and Suricata. In July 2025, Darktrace — a global AI cybersecurity company with nearly 10,000 customers — acquired Mira, and Mira now operates as a Darktrace subsidiary.
Mira Security firmographics
Firmographics- Name
- Mira Security
- Legal name
- Mira Security (Pty) Ltd
- Website
- https://mirasecurity.com
- Company type
- Private
- Founded year
- 2012
- Operating status
- Acquired
- Headcount range
- 1–10 employees
- Short description
- Mira Security builds encrypted traffic orchestration appliances that decrypt SSL/TLS and SSH traffic so enterprise security tools — NDR, IDS, SIEM, and forensics — can inspect threats hidden inside encrypted flows. Acquired by Darktrace in July 2025.
- Ownership category
- akta.pro rank
Mira Security industry classification
Industry- Product category
- Network Security Appliances
- NAICS
- Computer Systems Design and Related Services (54151), Security Systems Services (56162)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Network Security Services (Firewall/VPN/ZTNA/SASE Integration) (BPAEAEAG)
- akta.pro secondary industry
- Secure Communications & Encryption for Utility Networks (VPN, PKI, Key Management) (EUADANAG)
Keywords
Where Mira Security is headquartered
LocationHeadquarters
- HQ city
- Cranberry
- HQ country
- United States
- HQ region
- North America
Offices4 records
Markets served
Mira Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Supply Chain
Revenue model
- Hardware Appliance Sales: Sale of physical ETO decryption appliances (Medium Decryptor Series 3, Large Decryptor Series 5, Extra Large Decryptor Series 7) with varying throughput capacities up to 100Gbps.
- Software Subscriptions: ETO and vETO software licensed as subscription model for 12 or 36 months. Subscriptions can be upgraded during subscription period. License determines encrypted traffic decryption capacity.
- Cloud/Marketplace Licensing: AWS Marketplace listing with BYOL (Bring Your Own License) subscriptions or hourly rate billing for cloud vETO deployments.
- Professional Services: Technical product support services, training, and implementation assistance.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Multi-year contract | Physical ETO Appliances - Medium Decryptor (Series 3) |
| Subscription | Multi-year contract | Physical ETO Appliances - Large Decryptor (Series 5) |
| Subscription | Multi-year contract | Physical ETO Appliances - Extra Large Decryptor (Series 7) |
| Subscription | Multi-year contract | vETO Virtual Decryption - Entry Tier |
| Subscription | Multi-year contract | vETO Virtual Decryption - Mid Tier |
| Subscription | Multi-year contract | vETO Virtual Decryption - High Tier |
| Subscription | Multi-year contract | vETO Virtual Decryption - Max Tier |
| Subscription | Multi-year contract | Cloud vETO - BYOL |
| Usage-based | Pay-as-you-go | Cloud vETO - Hourly |
| Subscription | Multi-year contract | Central Manager License |
Go-to-market motion2 records
Distribution channels5 records
Marketing channels11 records
Mira Security product offering
Product offeringCore offering
Mira Security provides an Encrypted Traffic Orchestration (ETO) platform that automatically detects SSL, TLS and SSH traffic, decrypts it, and forwards the plaintext to enterprise security tools for threat detection and mitigation. The platform is delivered as physical hardware appliances (Medium, Large, Extra Large Decryptor series), virtual appliances (vETO for VMware/KVM), cloud-native deployments on AWS, and a centralized management system (Mira Central Manager) supporting up to 100 ETO nodes.
Product overview
Mira Security offers a unified Encrypted Traffic Orchestration (ETO) platform for decrypting SSL/TLS and SSH traffic to enable security tool visibility. The core ETO product line spans physical hardware appliances (Medium, Large, Extra Large Decryptor Series), virtual appliances (vETO for on-premises VMware/KVM), and cloud-native deployment (Cloud vETO for AWS). A Central Manager add-on provides centralized management of up to 100 ETO nodes. The platform addresses encryption blind spots created by TLS 1.3 and other protocols, feeding decrypted traffic to third-party security tools including IDS, NDR, and SIEM platforms. All products are subscription-licensed with 12 or 36-month terms.
Differentiator
Problem solved
Functional benefit
Brands
- ETO (Encrypted Traffic Orchestrator): Primary product platform providing encrypted traffic orchestration and visibility solutions for enterprise security tools.
- vETO (Virtual Encrypted Traffic Orchestrator)
- Mira Central Manager
Products and services
- Mira Encrypted Traffic Orchestrator (ETO) Physical and virtual appliance that automatically detects SSL, TLS, and SSH traffic and decrypts it for downstream security tools. Supports SSL v3, TLS 1.0-1.3, and SSHv2 with link speeds from 1 to 100 Gbps. Deployed inline as bump-in-the-wire for active decryption. Targeted at enterprise security operations teams.
- Mira Virtual ETO (vETO) World's first dedicated virtual TLS decryption appliance. Supports up to 5 Gbps decryption and 8000 connections per second. Available for VMware ESXi and KVM hypervisors including Proxmox. Licensed via subscription model (12 or 36 months). Targeted at enterprises running virtualized infrastructure.
- Mira Cloud vETO for AWS
Quantifiable outcome
- Eliminates blind spots in encrypted traffic - over 90% of north/south and 65% of east/west traffic is now encrypted
- +2 more outcomes
Companies that use Mira Security
Customer profileSegments4 records
Ideal customer profiles4 records
Mira Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration8 records
Feature7 records
Mira Security partnerships and signals
Strategic signalPartnerships
Twelve partnerships are on record, tiered flagship, core and minor.
- DarktraceflagshipDarktrace announced acquisition of Mira Security in July 2025. Prior to acquisition, partnership announced June 2025 integrating Mira ETO with Darktrace ActiveAI Security Platform for AI-enhanced protection. Mira intercepts encrypted traffic, decrypts it, forwards to Darktrace for anomaly detection. Integration requires only one feed of TLS-formatted plaintext and supports selective decryption for compliance.
- Garland TechnologyflagshipExclusive worldwide distribution partnership enabling Garland Technology to distribute Mira Security's decryption technologies globally through its network of resellers and distributors. Prior master distribution agreement was announced May 2024. Partnership combines Garland's EdgeLens inline bypass TAP and packet broker solutions with Mira's ETO decryption platform.
- Garland TechnologycoreMaster distribution agreement giving Garland Technology rights to distribute Mira Security's commercial solutions worldwide. Enables Garland's distributors and resellers to offer combined solution of EdgeLens Inline External Bypass and Mira's Encrypted Traffic Orchestrator (ETO).
- AxelliocoreJoint collaboration announced January 2024 with Garland Technology to provide comprehensive decryption and network visibility solution for TLS 1.3-encrypted traffic. Integrates Axellio's PacketXpress (high-speed packet capture/storage/distribution), Garland's EdgeLens (TAP/packet broker), and Mira's ETO (TLS decryption) to deliver over 100 Gbps capture with decryption for security and forensic analysis.
- TrellixcoreTechnology partnership integrating Mira ETO with Trellix security platform (IPS and Network Security NX). Mira decrypts SSL/TLS and SSH traffic, feeding plaintext to Trellix sensors for threat detection. Joint solution supports both inline and passive deployment modes for scalable, flexible enterprise security.
- LumucoreJoint solution integrating Mira ETO with Lumu Defender Network Detection and Response platform. Mira decrypts traffic providing Lumu full visibility into encrypted flows to detect and respond to hidden threats including C2 communications, ransomware, and data exfiltration.
- NIST National Cybersecurity Center of Excellence (NCCoE)flagshipCollaboration on Addressing Visibility Challenges with TLS 1.3 Project. Mira participates alongside other organizations to develop practical approaches and tools for gaining visibility into TLS 1.3 encrypted traffic. Project helps enterprises deploy TLS 1.3 in data centers and hybrid cloud environments while maintaining security monitoring capabilities.
- Braxton-Grant TechnologiesminorValue-added reseller offering integration solutions for network security environments with expertise in Mira decryption technologies.
- mnemonicminorManaged security services provider with 250+ security experts offering Mira decryption solutions to European customers.
- NetTects LLCminorProfessional services firm specializing in enterprise infrastructure design, implementation, and troubleshooting for security, network management, and traffic management.
- Passus GroupminorPolish reseller specializing in network and application performance monitoring, improvement, and IT security solutions including Mira products.
- Zenith DefenseminorDefense-focused consultancy providing cybersecurity solution design, installation, management, and consultation for secure infrastructure.
Scale indicators5 records
Recent moves7 records
Expansion highlights6 records
Mira Security competitors and assessment
Company assessmentBroad incumbents
- F5 Networks: F5 provides SSL/TLS visibility and orchestration capabilities primarily through its BIG-IP application delivery platform. F5 competes broadly with Mira for enterprise decryption visibility but as part of a much larger application delivery portfolio rather than as a specialized decryption appliance.
- Zscaler: Zscaler is a cloud-native security platform providing inline SSL/TLS inspection as part of its SASE/ZIA architecture. Zscaler competes with Mira for enterprise decryption visibility but delivers it as part of a broader cloud-delivered security platform rather than a dedicated appliance.
- Cisco (Catalyst/ThousandEyes): Cisco offers network visibility and SSL inspection capabilities across its Catalyst, Secure Firewall, and ThousandEyes portfolios. Cisco competes with Mira for decryption visibility but as part of a much broader enterprise networking and security portfolio rather than as a specialized decryption vendor.
Direct peers
- A10 Networks: A10 Networks offers SSL inspection and Thunder SSLi decryption solutions for inline visibility into encrypted traffic. A10's appliances and virtual solutions compete directly with Mira's ETO for enterprise decryption orchestration use cases.
- Keysight Technologies (Ixia): Keysight's Ixia division provides network visibility, SSL/TLS decryption, and packet broker solutions for enterprise and service provider security monitoring. Ixia competes with Mira in providing decryption orchestration feeding downstream security and analytics tools.
- Garland Technology: Garland Technology is Mira's exclusive global distribution partner and a leading network TAP and packet broker vendor. Garland's EdgeLens solutions provide bypass TAP functionality that complements and partly overlaps with Mira's decryption orchestration for inline enterprise security deployments.
- Gigamon: Gigamon is a leading provider of network visibility and analytics fabric, including deep packet inspection and SSL/TLS decryption orchestration. Gigamon competes directly with Mira in providing decryption and traffic intelligence for enterprise security stacks.
- Viavi Solutions: Viavi Solutions provides network visibility, security, and SSL decryption solutions (including the NITRO platform) for enterprise and government customers. Viavi competes with Mira in inline decryption and traffic intelligence for security operations.
Emerging players
- Corelight: Corelight provides network detection and response built on open-source Zeek, with decryption-aware traffic analysis. Corelight is an emerging player that intersects with Mira by consuming decrypted traffic from Mira ETO for threat detection.
- ExtraHop: ExtraHop provides network detection and response with built-in TLS decryption capabilities for enterprise security monitoring. ExtraHop is an emerging-to-mid-market NDR vendor that competes partially with Mira by offering native decryption within its own analytics platform.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
Mira Security social profiles
Digital presenceMira Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Mira Security leadership team
Management profileNumber of profiles
Profiles5 records
Mira Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Mira Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Mira Security
What does Mira Security do?
Mira Security provides an Encrypted Traffic Orchestration (ETO) platform that automatically detects SSL, TLS and SSH traffic, decrypts it, and forwards the plaintext to enterprise security tools for threat detection and mitigation. The platform is delivered as physical hardware appliances (Medium, Large, Extra Large Decryptor series), virtual appliances (vETO for VMware/KVM), cloud-native deployments on AWS, and a centralized management system (Mira Central Manager) supporting up to 100 ETO nodes.
Is Mira Security a public or private company?
Mira Security is a private company. It is classified as corporate owned and is currently acquired.
When was Mira Security founded?
Mira Security was founded in 2012. It employs 1 to 10 people.
Where is Mira Security based?
Mira Security is headquartered in Cranberry, United States, in the North America region.
How does Mira Security make money?
Four revenue lines are on record. Hardware Appliance Sales are the primary driver. The others are software Subscriptions, cloud/Marketplace Licensing and professional Services.
Who are Mira Security's main competitors?
Broad incumbents on record are F5 Networks, Zscaler and Cisco (Catalyst/ThousandEyes). Direct peers are A10 Networks, Keysight Technologies (Ixia), Garland Technology, Gigamon and Viavi Solutions. Emerging players are Corelight and ExtraHop.
Does Mira Security have an API?
No public API is recorded for Mira Security.
What industry is Mira Security in?
Mira Security's product category is Network Security Appliances. Its primary akta.pro industry code is BPAEAEAG, Network Security Services (Firewall/VPN/ZTNA/SASE Integration), with a secondary code of EUADANAG, Secure Communications & Encryption for Utility Networks (VPN, PKI, Key Management). Its NAICS code is 54151 and its SIC code is 7373.