BrightCloud
BrightCloud, a San Diego-based threat intelligence firm acquired by OpenText in 2019, delivers machine learning–powered URL, IP, phishing, malware, file, and cloud-service reputation intelligence via SDKs and APIs to OEM security vendors and service providers globally.
- Company typePublic
- Founded1991
- HeadquartersSan Diego, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What BrightCloud does
BrightCloud is a San Diego, US-based threat intelligence business founded in 2005 and acquired by OpenText Corporation (NASDAQ: OTEX) in 2019. It now operates as the product brand "OpenText Threat Intelligence (BrightCloud)" within OpenText's cybersecurity portfolio, with historical 11–50 employee scale. The company sells a machine learning–powered threat intelligence platform built on telemetry from millions of real-world endpoints and a global sensor network, with stated reach over billions of URLs and IPs. The platform is delivered as six independently-purchasable services — Web Classification & Web Reputation, IP Reputation, Real-Time Anti-Phishing, Streaming Malware Detection, File Reputation, and Cloud Service Intelligence — exposed via SDKs and APIs to OEM partners and managed service providers who embed the intelligence into their own products.
The underlying technology stack combines anomaly detection, NLP for phishing site assessment, and predictive analytics that map relationships across URLs, IPs, files, and apps to surface zero-hour and polymorphic threats. Revenue is generated through subscription licensing on annual billing cycles, sold either per-module or as a suite, primarily to OEM security vendors and service providers globally. Distribution is concentrated through OpenText's enterprise cloud partnerships with AWS, Microsoft Azure, Google Cloud, SAP, Microsoft, and Salesforce, enabling embedded deployment across Americas, EMEA, and APAC markets.
The business profile is one of a feature/product brand within a much larger publicly-traded parent rather than an independent operating company, and standalone financial KPIs (revenue, headcount, growth) are not separately disclosed in public sources. Leadership under president & CEO Quinn Curtis, listed in third-party firmographic sources, is described at the parent-company level rather than as a BrightCloud-dedicated role.
BrightCloud firmographics
Firmographics- Name
- BrightCloud
- Legal name
- Open Text Corporation
- Website
- https://brightcloud.com
- Company type
- Public
- Founded year
- 1991
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- BrightCloud, a San Diego-based threat intelligence firm acquired by OpenText in 2019, delivers machine learning–powered URL, IP, phishing, malware, file, and cloud-service reputation intelligence via SDKs and APIs to OEM security vendors and service providers globally.
- Ownership category
- akta.pro rank
BrightCloud industry classification
Industry- Product category
- Threat Intelligence & Cybersecurity
- NAICS
- Security Systems Services (56162), Other Computer Related Services (541519), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518210)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Threat Intelligence Services (BPAEADAC)
- akta.pro secondary industries
- Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG), Vulnerability Intelligence & Exploit Prediction (HDADAHAI)
Keywords
Where BrightCloud is headquartered
LocationHeadquarters
- HQ city
- San Diego
- HQ country
- United States
- HQ region
- North America
Markets served
BrightCloud business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Infrastructure, Personnel, Marketing or Sales
Revenue model
- Threat Intelligence Suite Licensing: Each threat intelligence service can be purchased independently or as a suite, targeting OEM partners and service providers who integrate the intelligence into their security products.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Individual services or bundled suite |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels3 records
BrightCloud product offering
Product offeringCore offering
BrightCloud (now OpenText Threat Intelligence) provides machine learning-powered, cloud-hosted threat intelligence services delivered primarily through OEM/embedded partnerships. It offers six independently purchasable services—Web Classification & Web Reputation, IP Reputation, Real-Time Anti-Phishing, Streaming Malware Detection, File Reputation, and Cloud Service Intelligence—that security vendors, MSPs, and service providers integrate into their own products via SDKs and APIs to detect malware, phishing, ransomware, malicious IPs, URLs, and cloud service risks in real time.
Product overview
OpenText Threat Intelligence (BrightCloud) is a unified threat intelligence platform that leverages machine learning and data from millions of real-world endpoints through a global sensor network. The platform offers six independently purchasable services: Web Classification & Web Reputation Service, IP Reputation Service, Real-Time Anti-Phishing Service, Streaming Malware Detection Service, File Reputation Service, and Cloud Service Intelligence Service. These services can be purchased individually or as a suite and integrate seamlessly into partner security solutions via SDKs and APIs. The platform provides comprehensive coverage for malware, phishing, ransomware, malicious URLs, IP threats, and cloud service risks.
Differentiator
Problem solved
Functional benefit
Brands
- OpenText Web Classification & Web Reputation Service: Real-time protection against malicious URLs with classification of billions of URLs using advanced machine learning.
- OpenText Threat Intelligence IP Reputation Service
- OpenText Threat Intelligence Real-Time Anti-Phishing Service
- OpenText Threat Intelligence Streaming Malware Detection Service
- OpenText Threat Intelligence File Reputation Service
- OpenText Cloud Service Intelligence Service
Products and services
- OpenText Threat Intelligence (BrightCloud) A comprehensive threat intelligence platform that harnesses machine learning and massive datasets from millions of real-world endpoints through a global sensor network to detect emerging threats and vulnerabilities. Enables real-time threat blocking with web classification, cloud service intelligence, IP reputation, anti-phishing, and malware detection for OEM security vendors, service providers, and enterprise partners.
- Web Classification & Web Reputation Service
Quantifiable outcome
- Classification of billions of URLs across the entire web
- +1 more outcomes
Companies that use BrightCloud
Customer profileSegments2 records
Ideal customer profiles2 records
BrightCloud technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability5 records
Feature6 records
BrightCloud partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered core and flagship.
- Amazon Web Services (AWS)corePublic cloud infrastructure partner enabling deployment and management of OpenText information management solutions on AWS cloud platform.
- Google CloudcoreCloud infrastructure partner offering optimized performance and reduced costs with applications deployed on a secure, globally scaled platform.
- Microsoft AzurecorePublic cloud partner enabling accelerated migration and modernization with deployment in a highly secure and compliant Microsoft Azure environment.
- SAPflagshipStrategic enterprise application partnership for maximizing growth, value, and innovation with intelligent enterprise solutions combining OpenText and SAP offerings.
- MicrosoftflagshipEnterprise application partnership connecting content to business processes for better productivity and stronger governance through Microsoft integrations.
- SalesforcecoreEnterprise application partnership optimizing Salesforce effectiveness by bringing together transactional data and unstructured content.
Scale indicators1 record
Recent moves5 records
Expansion highlights4 records
BrightCloud competitors and assessment
Company assessmentDirect peers
- Anomali: Threat intelligence platform offering feeds, threat investigation, and SIEM integrations to security vendors and enterprises. Competes directly with BrightCloud on reputation feeds, threat data licensing, and machine-learning-driven threat scoring.
- Recorded Future: One of the largest pure-play threat intelligence platforms, providing real-time intelligence on malicious IPs, domains, URLs, and vulnerabilities. Direct overlap with BrightCloud's web classification, IP reputation, and anti-phishing services, and an OEM/embedded go-to-market model that competes head-to-head for the same partner integrations.
- VirusTotal (Google): Free and subscription file/URL reputation service aggregating multiple antivirus engines and threat feeds. Directly comparable to BrightCloud's File Reputation and Web Classification services, with a massive community-contributed sample corpus.
- ThreatConnect: Threat intelligence platform combining threat data feeds, analytics, and orchestration. Competes with BrightCloud for OEM/embedded deals where partners want integrated intelligence plus workflow automation on top of raw reputation data.
Broad incumbents
- Mandiant (Google Cloud): Now part of Google Cloud, Mandiant provides threat intelligence as part of a broader incident response, managed defense, and consulting portfolio. Competes with BrightCloud's predictive intelligence capability at the high end of the enterprise market with significantly larger resources.
- CrowdStrike Falcon Intelligence: Endpoint-native threat intelligence bundled into the Falcon XDR platform. Competes with BrightCloud for OEM/embedded use cases by offering intelligence tightly coupled with CrowdStrike's installed endpoint base — a significant distribution advantage.
- Palo Alto Networks Unit 42: Threat intelligence team that feeds Palo Alto Networks' products (Cortex XSIAM, AutoFocus). A broad incumbent offering IP, file, and URL reputation feeds at scale, increasingly bundled into larger platform deals that compete with BrightCloud's OEM positioning.
- Kaspersky Threat Intelligence Portal: Provides threat data feeds (IP, URL, file reputation, phishing) and threat intelligence reports based on Kaspersky's global sensor network. Overlaps with BrightCloud's web classification, IP reputation, and anti-phishing services.
Emerging players
- Cybereason: Endpoint detection and response platform with embedded threat intelligence capabilities. Partial overlap with BrightCloud's streaming malware detection and file reputation services in the OEM/embedded partner ecosystem.
- AlienVault / AT&T Cybersecurity (now Fortra): Historically offered Open Threat Exchange (OTX) community-shared threat intelligence alongside its SIEM. Comparable threat intel feeds and reputation services targeting MSSPs and enterprise security teams.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat4 records
Key risks5 records
Key highlights6 records
Customer concentration
BrightCloud social profiles
Digital presenceBrightCloud financial estimates
Financial estimateRevenue estimate
Valuation estimate
BrightCloud leadership team
Management profileNumber of profiles
Profiles1 record
BrightCloud subsidiaries and ownership
Company hierarchySubsidiaries1 record
BrightCloud funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
BrightCloud M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about BrightCloud
What does BrightCloud do?
BrightCloud (now OpenText Threat Intelligence) provides machine learning-powered, cloud-hosted threat intelligence services delivered primarily through OEM/embedded partnerships. It offers six independently purchasable services—Web Classification & Web Reputation, IP Reputation, Real-Time Anti-Phishing, Streaming Malware Detection, File Reputation, and Cloud Service Intelligence—that security vendors, MSPs, and service providers integrate into their own products via SDKs and APIs to detect malware, phishing, ransomware, malicious IPs, URLs, and cloud service risks in real time.
Is BrightCloud a public or private company?
BrightCloud is a public company. It is classified as corporate owned and is currently operating.
When was BrightCloud founded?
BrightCloud was founded in 1991. It employs 11 to 50 people.
Where is BrightCloud based?
BrightCloud is headquartered in San Diego, United States, in the North America region.
How does BrightCloud make money?
One revenue line is on record: threat Intelligence Suite Licensing.
Who are BrightCloud's main competitors?
Direct peers on record are Anomali, Recorded Future, VirusTotal (Google) and ThreatConnect. Broad incumbents are Mandiant (Google Cloud), CrowdStrike Falcon Intelligence, Palo Alto Networks Unit 42 and Kaspersky Threat Intelligence Portal. Emerging players are Cybereason and AlienVault / AT&T Cybersecurity (now Fortra).
Does BrightCloud have an API?
Yes. OpenText provides APIs and SDKs for integration into existing security infrastructure. The OpenText API bundle includes Information Management APIs and Services. Developers can build custom applications using proven OpenText Information Management technology. The API enables fast, scalable deployment into existing security solutions. Developer documentation is at developer.opentext.com.
What industry is BrightCloud in?
BrightCloud's product category is Threat Intelligence & Cybersecurity. Its primary akta.pro industry code is BPAEADAC, Threat Intelligence Services, with a secondary code of BPAEADAG, Network Security Managed Services (Firewall/IDS/IPS/SASE). Its NAICS code is 56162 and its SIC code is 7372.