BrightCloud

What BrightCloud does

BrightCloud is a San Diego, US-based threat intelligence business founded in 2005 and acquired by OpenText Corporation (NASDAQ: OTEX) in 2019. It now operates as the product brand "OpenText Threat Intelligence (BrightCloud)" within OpenText's cybersecurity portfolio, with historical 11–50 employee scale. The company sells a machine learning–powered threat intelligence platform built on telemetry from millions of real-world endpoints and a global sensor network, with stated reach over billions of URLs and IPs. The platform is delivered as six independently-purchasable services — Web Classification & Web Reputation, IP Reputation, Real-Time Anti-Phishing, Streaming Malware Detection, File Reputation, and Cloud Service Intelligence — exposed via SDKs and APIs to OEM partners and managed service providers who embed the intelligence into their own products.

The underlying technology stack combines anomaly detection, NLP for phishing site assessment, and predictive analytics that map relationships across URLs, IPs, files, and apps to surface zero-hour and polymorphic threats. Revenue is generated through subscription licensing on annual billing cycles, sold either per-module or as a suite, primarily to OEM security vendors and service providers globally. Distribution is concentrated through OpenText's enterprise cloud partnerships with AWS, Microsoft Azure, Google Cloud, SAP, Microsoft, and Salesforce, enabling embedded deployment across Americas, EMEA, and APAC markets.

The business profile is one of a feature/product brand within a much larger publicly-traded parent rather than an independent operating company, and standalone financial KPIs (revenue, headcount, growth) are not separately disclosed in public sources. Leadership under president & CEO Quinn Curtis, listed in third-party firmographic sources, is described at the parent-company level rather than as a BrightCloud-dedicated role.

Name

BrightCloud

Legal name

Open Text Corporation

Website

https://brightcloud.com

Company type

Public

Founded year

1991

Operating status

Operating

Headcount range

11–50 employees

Short description

BrightCloud, a San Diego-based threat intelligence firm acquired by OpenText in 2019, delivers machine learning–powered URL, IP, phishing, malware, file, and cloud-service reputation intelligence via SDKs and APIs to OEM security vendors and service providers globally.

Ownership category

akta.pro rank

Product category

Threat Intelligence & Cybersecurity

NAICS

Security Systems Services (56162), Other Computer Related Services (541519), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518210)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Threat Intelligence Services (BPAEADAC)

akta.pro secondary industries

Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG), Vulnerability Intelligence & Exploit Prediction (HDADAHAI)

Keywords

• Threat intelligence services
• Cyber threat detection
• Web reputation services
• IP reputation data
• Anti-phishing solutions

Headquarters

HQ city

San Diego

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Infrastructure, Personnel, Marketing or Sales

Revenue model

1. Threat Intelligence Suite Licensing: Each threat intelligence service can be purchased independently or as a suite, targeting OEM partners and service providers who integrate the intelligence into their security products.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels3 records

Core offering

BrightCloud (now OpenText Threat Intelligence) provides machine learning-powered, cloud-hosted threat intelligence services delivered primarily through OEM/embedded partnerships. It offers six independently purchasable services—Web Classification & Web Reputation, IP Reputation, Real-Time Anti-Phishing, Streaming Malware Detection, File Reputation, and Cloud Service Intelligence—that security vendors, MSPs, and service providers integrate into their own products via SDKs and APIs to detect malware, phishing, ransomware, malicious IPs, URLs, and cloud service risks in real time.

Product overview

OpenText Threat Intelligence (BrightCloud) is a unified threat intelligence platform that leverages machine learning and data from millions of real-world endpoints through a global sensor network. The platform offers six independently purchasable services: Web Classification & Web Reputation Service, IP Reputation Service, Real-Time Anti-Phishing Service, Streaming Malware Detection Service, File Reputation Service, and Cloud Service Intelligence Service. These services can be purchased individually or as a suite and integrate seamlessly into partner security solutions via SDKs and APIs. The platform provides comprehensive coverage for malware, phishing, ransomware, malicious URLs, IP threats, and cloud service risks.

Differentiator

Problem solved

Functional benefit

Brands

• OpenText Web Classification & Web Reputation Service: Real-time protection against malicious URLs with classification of billions of URLs using advanced machine learning.
• OpenText Threat Intelligence IP Reputation Service
• OpenText Threat Intelligence Real-Time Anti-Phishing Service
• OpenText Threat Intelligence Streaming Malware Detection Service
• OpenText Threat Intelligence File Reputation Service
• OpenText Cloud Service Intelligence Service

Products and services

• OpenText Threat Intelligence (BrightCloud) A comprehensive threat intelligence platform that harnesses machine learning and massive datasets from millions of real-world endpoints through a global sensor network to detect emerging threats and vulnerabilities. Enables real-time threat blocking with web classification, cloud service intelligence, IP reputation, anti-phishing, and malware detection for OEM security vendors, service providers, and enterprise partners.
• Web Classification & Web Reputation Service

Quantifiable outcome

• Classification of billions of URLs across the entire web
• +1 more outcomes

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

AI capability5 records

Feature6 records

Partnerships

Six partnerships are on record, tiered core and flagship.

• Amazon Web Services (AWS)coreTechnology or IntegrationPublic cloud infrastructure partner enabling deployment and management of OpenText information management solutions on AWS cloud platform.
• Google CloudcoreTechnology or IntegrationCloud infrastructure partner offering optimized performance and reduced costs with applications deployed on a secure, globally scaled platform.
• Microsoft AzurecoreTechnology or IntegrationPublic cloud partner enabling accelerated migration and modernization with deployment in a highly secure and compliant Microsoft Azure environment.
• SAPflagshipTechnology or IntegrationStrategic enterprise application partnership for maximizing growth, value, and innovation with intelligent enterprise solutions combining OpenText and SAP offerings.
• MicrosoftflagshipTechnology or IntegrationEnterprise application partnership connecting content to business processes for better productivity and stronger governance through Microsoft integrations.
• SalesforcecoreTechnology or IntegrationEnterprise application partnership optimizing Salesforce effectiveness by bringing together transactional data and unstructured content.

Scale indicators1 record

Recent moves5 records

Expansion highlights4 records

Direct peers

• Anomali: Threat intelligence platform offering feeds, threat investigation, and SIEM integrations to security vendors and enterprises. Competes directly with BrightCloud on reputation feeds, threat data licensing, and machine-learning-driven threat scoring.
• Recorded Future: One of the largest pure-play threat intelligence platforms, providing real-time intelligence on malicious IPs, domains, URLs, and vulnerabilities. Direct overlap with BrightCloud's web classification, IP reputation, and anti-phishing services, and an OEM/embedded go-to-market model that competes head-to-head for the same partner integrations.
• VirusTotal (Google): Free and subscription file/URL reputation service aggregating multiple antivirus engines and threat feeds. Directly comparable to BrightCloud's File Reputation and Web Classification services, with a massive community-contributed sample corpus.
• ThreatConnect: Threat intelligence platform combining threat data feeds, analytics, and orchestration. Competes with BrightCloud for OEM/embedded deals where partners want integrated intelligence plus workflow automation on top of raw reputation data.

Broad incumbents

• Mandiant (Google Cloud): Now part of Google Cloud, Mandiant provides threat intelligence as part of a broader incident response, managed defense, and consulting portfolio. Competes with BrightCloud's predictive intelligence capability at the high end of the enterprise market with significantly larger resources.
• CrowdStrike Falcon Intelligence: Endpoint-native threat intelligence bundled into the Falcon XDR platform. Competes with BrightCloud for OEM/embedded use cases by offering intelligence tightly coupled with CrowdStrike's installed endpoint base — a significant distribution advantage.
• Palo Alto Networks Unit 42: Threat intelligence team that feeds Palo Alto Networks' products (Cortex XSIAM, AutoFocus). A broad incumbent offering IP, file, and URL reputation feeds at scale, increasingly bundled into larger platform deals that compete with BrightCloud's OEM positioning.
• Kaspersky Threat Intelligence Portal: Provides threat data feeds (IP, URL, file reputation, phishing) and threat intelligence reports based on Kaspersky's global sensor network. Overlaps with BrightCloud's web classification, IP reputation, and anti-phishing services.

Emerging players

• Cybereason: Endpoint detection and response platform with embedded threat intelligence capabilities. Partial overlap with BrightCloud's streaming malware detection and file reputation services in the OEM/embedded partner ecosystem.
• AlienVault / AT&T Cybersecurity (now Fortra): Historically offered Open Threat Exchange (OTX) community-shared threat intelligence alongside its SIEM. Comparable threat intel feeds and reputation services targeting MSSPs and enterprise security teams.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/brightcloudbuzz
• YouTubeyoutube.com/user/opentextcorp
• LinkedInlinkedin.com/company/brightcloud
• Facebookfacebook.com/BrightCloud-181710903538

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about BrightCloud