Name

Virtis

Legal name

VIRTIS Ltd.

Website

https://virtis-us.com

Company type

Private

Founded year

2008

Operating status

Operating

Headcount range

11–50 employees

Ownership category

akta.pro rank

Product category

Cloud Cybersecurity (Web Application & API Protection)

NAICS

Security Systems Services (56162), Computer Systems Design and Related Services (54151), Computer Systems Design and Related Services (5415), Computer Facilities Management Services (541513)

SIC

Services-Computer Programming Services (7371), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Web Application Security (WAF, RASP) (HDADACAA)

akta.pro secondary industries

Web Application Firewall (WAF) Appliances (HDAFAFAJ), Security Operations Center (SOC) as a Service (BPAEADAB), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA), Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ)

Keywords

• Web application firewall
• API protection
• DDoS mitigation
• Bot management
• Managed detection response

Headquarters

HQ city

Los Angeles

HQ country

United States

HQ region

North America

Offices5 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Operations, Marketing or Sales

Revenue model

1. Cloud Security Platform Subscription: Virtis provides a fully managed, cloud-based security platform as a subscription service. The platform is deployed as a reverse proxy and maintained remotely by VIRTIS personnel. Customers receive dedicated VPC, automated updates, and always-up-to-date protection.
2. Managed Detection and Response (MDR): 24/7 MDR powered by global SOC experts included as part of the service offering, with unlimited incident response and comprehensive vulnerability management.
3. Professional Services: Cybersecurity advisory services including Enterprise Risk Management, Vulnerability Assessment, PCI/HIPAA/GDPR Compliance Management, Penetration Testing, and GRC Center of Excellence establishment.

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels4 records

Core offering

Virtis sells a cloud-native Web Application and API Protection (WAAP) platform deployed as a reverse proxy, combining a next-generation Web Application Firewall, API security, multilayer DDoS protection, bot management, global CDN, and traffic management. The platform is delivered as a fully managed, subscription-based service with 24/7 MDR by a global SOC and machine-learning-based adaptive threat detection. Customers additionally receive professional cybersecurity advisory services covering compliance, risk management, vulnerability assessment, and penetration testing.

Product overview

VIRTIS is a cloud-native Web Application and API Protection (WAAP) platform providing unified web security as a comprehensive suite of integrated products. The core platform combines Web Application Firewall, API Security, DDoS Protection, Bot Management, Global CDN, and Traffic Management in a single reverse proxy deployment with dedicated VPC per customer and near-zero latency (<1.5ms). The platform is built around a next-generation multivariate WAF and advanced machine-learning powered bot detection system. Additional modules include Vulnerability Management, Asset Discovery, ATO Prevention, GRC services, Vendor Management/TPRM, Scanning/MXDR, and MDR. VIRTIS supports full DevSecOps integration with programmatic API control and client-side SDK for mobile applications. The service is fully managed with 24/7 SOC support and can be deployed on AWS, Azure, Google Cloud, or in hybrid mode.

Differentiator

Problem solved

Functional benefit

Products and services

• VIRTIS Platform (Cloud-Native WAAP) Cloud-native Web Application Firewall and API Protection (WAAP) platform deployed as a reverse proxy, providing unified web protection with near-zero latency (<1.5ms), dedicated VPC per customer, full DevSecOps support, and native deployment on AWS, Azure, and Google Cloud. For enterprises and government organizations requiring comprehensive web and API security.
• Web Application Firewall Next-generation multivariate Web Application Firewall that prevents code and SQL injection, XSS, form manipulation, protocol exploits, session tampering, malicious payloads, and other attacks on web applications.
• API Security Full API protection including schema ingestion, validation, enforcement, and reverse-engineering prevention, with a client-side SDK for protecting mobile and native applications and endpoints.
• DDoS Protection Multilayer DDoS protection defeating attacks across layers 3, 4, and 7 (network, transport, and application) with automatic resource scaling and elastic load balancing.
• Bot Management Advanced bot detection using multivariate analysis, headless browser detection, biometric behavioral analysis, and challenge-response mechanisms to distinguish malicious bots from legitimate traffic.
• Global CDN & Caching Global CDN integration with seamless cache and SSL management that accelerates content delivery through edge locations across the US, Europe, and Asia.
• Traffic Management Real-time traffic control with fine-grained ACLs allowing or denying access by city, country, company, network, visitor behavior, and more.
• Governance, Risk & Compliance (GRC) GRC services including audit and certification lifecycle, managed security services, fractional CCO, risk management programs, SOC-as-a-Service, privacy management, and third-party risk management for regulated organizations.
• Vendor Management / TPRM Third-party risk management and supply chain risk monitoring service with dashboard, board-level reporting, compliance indicators, and breach event tracking for organizations managing vendor ecosystems.
• MDR (Managed Detection & Response) 24/7 Managed Detection and Response powered by global SOC experts with unlimited incident response and real-time risk assessments, bundled with the VIRTIS platform.
• Managed Threat Complete MXDR 24x7x365 Managed Extended Detection and Response (MXDR), threat hunting, and Digital Forensics and Incident Response (DFIR) delivered in partnership with Rapid7 using its XDR, SIEM, SOAR, and VRM technology stack.
• Cybersecurity Advisory Services Cybersecurity advisory services covering Enterprise Risk Management, Vulnerability Assessment, PCI/HIPAA/GDPR Compliance Management, Penetration Testing, audit readiness, and cyber insurance readiness for enterprises.
• Technology Services Architecture design and integration, proprietary scanning solutions, penetration testing, perimeter auditing, SIEM, and MDR services for enterprise security operations.

Quantifiable outcome

• Latency of 0.5-1.5ms for traffic processing
• +3 more outcomes

Named customers11 records

Segments9 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration10 records

AI capability5 records

Feature10 records

Partnerships

Six partnerships are on record, tiered core and flagship.

• AWS (Amazon Web Services)coreTechnology or IntegrationVirtis is fully integrated with AWS, running natively on AWS infrastructure. Customers can process and scrub traffic exclusively within their AWS environments. Virtis can be deployed within customer AWS accounts.
• Microsoft AzurecoreTechnology or IntegrationVirtis is fully integrated with Microsoft Azure, allowing customers to deploy within their Azure infrastructure. Part of the top-tier cloud provider integration strategy.
• Google Cloud PlatformcoreTechnology or IntegrationVirtis is fully integrated with Google Cloud Platform, completing the top-tier cloud provider integration suite. Customers can process traffic within their GCP environment.
• Marsh MarketplaceflagshipGTM or Marketing PartnerVirtis is officially endorsed by Marsh Marketplace, described as the World's Leading Insurance Broker and Risk Management Advisor. This endorsement provides credibility and access to Marsh's enterprise customer base focused on risk management.
• Rapid7coreTechnology or IntegrationVirtis partners with Rapid7 for Managed Threat Complete MXDR solution, providing 24x7x365 MXDR, threat hunting, and DFIR across customer ecosystems using Rapid7's leading technology including XDR, SIEM, SOAR, and VRM.
• CDN Providers (CloudFront, etc.)coreTechnology or IntegrationVirtis integrates seamlessly with virtually every CDN provider including Amazon CloudFront, with edge locations throughout US, Europe, and Asia for accelerated content delivery.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Cloudflare: Cloudflare's Web Application Firewall, Bot Management, API Shield, and DDoS protection directly overlap Virtis's WAAP stack. Both offer cloud-native reverse-proxy WAAP with global edge infrastructure and managed services, and they compete head-to-head for the same enterprise buyers.
• Akamai: Akamai App & API Protector combines WAF, API security, bot management, and DDoS mitigation delivered from a global edge platform. Akamai is one of the closest direct competitors to Virtis in cloud-native WAAP for enterprise and regulated buyers.
• F5: F5's NGINX App Protect, BIG-IP Advanced WAF, and Distributed Cloud WAAP compete directly with Virtis. Both target enterprise application security with WAF, bot defense, and API protection, and both emphasize managed service and DevSecOps integration.
• Imperva: Imperva's Web Application Firewall, API Security, Bot Management, and DDoS Protection are core WAAP products overlapping with Virtis's portfolio. Imperva is a long-standing specialist competitor in enterprise web and API security.
• Fastly (Signal Sciences): Fastly's Next-Gen WAF (acquired from Signal Sciences), Bot Management, and API protection on a global edge compute platform directly compete with Virtis. Both position around DevSecOps-friendly deployment and modern application security.
• Radware: Radware's Cloud WAF, API Protection, Bot Manager, and DDoS Protection compete head-to-head with Virtis in enterprise web security, with a strong presence in financial services and gaming verticals.
• Barracuda Networks: Barracuda's WAF-as-a-Service and Application Protection offerings overlap with Virtis's platform, particularly for mid-market and enterprise customers seeking cloud-native WAF, bot mitigation, and API security.

Broad incumbents

• AWS WAF & Shield: AWS WAF and AWS Shield offer natively bundled WAF and DDoS protection inside the AWS ecosystem. They compete with Virtis by offering an 'included' alternative for AWS-centric enterprises, often at lower marginal cost.

Emerging players

• Indusface (AppTrana): AppTrana from Indusface offers a fully managed WAF, API protection, bot mitigation, and DDoS service comparable to Virtis's bundled offering. It is a relevant emerging competitor for managed WAAP in mid-market and emerging geographies.
• Reblaze: Reblaze delivers cloud-native WAAP including WAF, bot management, API security, and DDoS protection, with a private-cloud deployment model that overlaps with Virtis's dedicated-VPC architecture and managed service positioning.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

Compliance15 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Virtis