Cisco Umbrella

What Cisco Umbrella does

Cisco Umbrella is a cloud-native security platform that delivers DNS-layer security as a first line of defense against internet-borne threats, expanding into secure web gateway, cloud access security broker (CASB), data loss prevention (DLP), cloud-delivered firewall, remote browser isolation (RBI), and zero trust network access (ZTNA) under the unified Cisco Secure Access SSE architecture. The platform is built on a global Anycast network of carrier-neutral data centers and is powered by Cisco Talos threat intelligence, which processes approximately 715 billion DNS requests daily to identify malicious domains, IPs, and cloud applications before connections are established. It is the direct successor to OpenDNS, acquired by Cisco Systems in 2015 and rebranded in November 2016, and is operated as a wholly-owned product line under Cisco OpenDNS LLC.

Name

Cisco Umbrella

Legal name

Cisco OpenDNS LLC

Website

https://umbrella.cisco.com

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

251–500 employees

Short description

Cisco Umbrella is a cloud-native security platform delivering DNS-layer security, secure web gateway, CASB, DLP, and firewall capabilities to over 30,000 organizations. Originally OpenDNS, acquired by Cisco in 2015, it processes 715 billion DNS requests daily and underpins Cisco's Secure Access SSE solution.

Ownership category

akta.pro rank

Product category

Cloud Network Security

NAICS

Security Systems Services (except Locksmiths) (561621), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Communications Services, Nec (4899)

akta.pro primary industry

Secure Access Service Edge (SASE) & SSE (HDADABAB)

akta.pro secondary industries

Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG), Secure Access Service Edge (SASE) & Secure SD-WAN (HDAIAFAH), Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK)

Keywords

• Cloud security
• DNS-layer security
• Secure web gateway
• CASB solution
• SASE platform

Headquarters

HQ city

San Francisco

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Infrastructure, Personnel, Marketing or Sales, Operations

Revenue model

1. Subscription Licensing: Annual and multi-year subscription-based licensing model with tiered packages. Subscriptions auto-renew for successive terms at current pricing. Fees based on seats, sites, or access points purchased rather than actual usage.
2. Per-Seat Licensing: Licenses sold based on number of customer seats, sites, and/or customer access points. Additional restrictions apply to Services ordered via written order form.
3. MSP/MSSP Managed Services: Managed service providers can order via Cisco Secure MSP Center with monthly credit card payments and tiered pricing based on usage for serving SMB end customers.

Pricing tiers

Go-to-market motion3 records

Distribution channels5 records

Marketing channels8 records

Core offering

Cisco Umbrella is a cloud-delivered network security platform that provides DNS-layer security, secure web gateway (SWG), cloud access security broker (CASB), data loss prevention (DLP), cloud-delivered firewall, and remote browser isolation (RBI) as a unified service. Originally launched as OpenDNS and rebranded to Cisco Umbrella in November 2016, the platform enforces security at the DNS layer to block malicious destinations before connections are established, protecting users on and off the corporate network.

Product overview

Cisco Umbrella is a comprehensive cloud security platform offering a portfolio of integrated products and packages spanning DNS-layer security, secure web gateway, CASB, DLP, cloud-delivered firewall, and remote browser isolation. The platform is delivered as a cloud-native service and is evolving into Cisco Secure Access, a full Security Service Edge (SSE) solution. Core products include Cisco Umbrella Cloud Security Service, Umbrella DNS, and Umbrella SIG (Secure Internet Gateway). The product family includes tiered packages (DNS Security Essentials/Advantage, SIG Essentials/Advantage), add-on modules (Umbrella Investigate, Roaming Client/Secure Client), and specialized government offerings (Umbrella for Government, Secure Access for Government). Integration with Cisco Duo provides layered identity protection, while ThousandEyes enables digital experience monitoring. The platform is powered by Cisco Talos threat intelligence processing over 715 billion DNS requests daily.

Differentiator

Problem solved

Functional benefit

Brands

• Cisco Secure Access: Modern Security Service Edge (SSE) solution that extends beyond Umbrella's DNS-layer security to provide comprehensive cloud-delivered protection including Secure Internet Access (SIA) and Secure Private Access (SPA).
• Cisco Secure Client
• Cisco Umbrella SIG (Secure Internet Gateway)

Products and services

• Cisco Umbrella Cloud-delivered network security platform that enforces security at the DNS layer and through SWG, CASB, DLP, cloud-delivered firewall, and RBI. Designed for enterprise IT and security teams to protect users, devices, and locations against internet-borne threats.
• Cisco Secure Access SSE solution that unifies Umbrella's SWG, CASB, DLP, and firewall capabilities with Zero Trust Network Access to provide secure access to private applications, SaaS, and the internet for distributed workforces. Targeted at enterprise security and network operations teams.
• Umbrella Investigate Cloud-based threat intelligence and investigation console that provides contextual data on malicious domains, IPs, and ASNs, helping security analysts triage threats and enrich incident response workflows. Sold as a standalone subscription to security operations teams.
• Recursive DNS Services Managed recursive DNS resolution service that filters and inspects DNS queries, providing the foundation for Umbrella's DNS-layer security. Used by organizations to improve DNS performance, reliability, and threat protection at the network edge.
• Cisco Umbrella for Government

Quantifiable outcome

• 231% ROI delivered in three years according to Forrester study
• +6 more outcomes

Named customers12 records

Segments10 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration12 records

AI capability4 records

Feature10 records

Partnerships

Ten partnerships are on record, tiered core and supporting.

• Cisco MerakicoreTechnology or IntegrationDeep native integration between Cisco Umbrella and Meraki MX for seamless cloud security deployment. Cosentino reported connecting Meraki to Umbrella took just two clicks, enabling standardized security across global offices with consistent rules and policies.
• Cisco DuocoreTechnology or IntegrationIntegrated solution combining Umbrella DNS-layer security with Duo identity authentication for layered protection. Cisco Secure Access for Government deploys alongside Cisco SD-WAN and Duo for zero-trust ecosystem tailored to government needs.
• Cisco TaloscoreTechnology or IntegrationOne of the largest commercial threat intelligence teams providing unrivaled, actionable intelligence for known and emerging threats. Talos uses statistical and machine learning models to uncover new attacks staged on the internet, providing predictive intelligence.
• ThousandEyessupportingTechnology or IntegrationExperience Insights (digital experience monitoring based on ThousandEyes) provides deep visibility and faster troubleshooting within Cisco Secure Access SIA.
• Cisco SD-WAN (Viptela)coreTechnology or IntegrationIntegrated with Cisco SD-WAN for secure networking and security convergence. Government-specific deployment combines SD-WAN with Umbrella and Duo for comprehensive zero-trust architecture.
• Cisco Secure EndpointsupportingTechnology or IntegrationLayered security approach combining Umbrella DNS security with Secure Endpoint (formerly AMP) for comprehensive endpoint protection. Room & Board uses both for Windows devices, Linux endpoints, and iPads.
• Cisco Secure ClientcoreTechnology or IntegrationUmbrella Roaming Module integrated into Cisco Secure Client (next-gen endpoint agent) at no additional cost. Multi-function capability includes enhanced roaming protection, SWG protection, and improved VPN interoperability.
• Cisco ISE (Identity Services Engine)supportingTechnology or IntegrationIntegration with Cisco ISE for network access control and policy enforcement across the security platform.
• Cisco Secure MSP CentercoreChannel Partner/ Reseller/ DistributorPlatform enabling MSPs to deliver Umbrella protection to SMB customers with streamlined ordering, monthly payments, and 24/7 dedicated support.
• 400+ Third-Party IntegrationssupportingTechnology or IntegrationExtensive ecosystem of third-party integrations extending existing security infrastructure and improving network security across diverse technology environments.

Scale indicators14 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• iboss: iboss is a cloud-native SSE/SASE platform competing directly with Cisco Umbrella on SWG, ZTNA, and cloud-delivered firewall for distributed enterprises and regulated industries.
• Zscaler: Zscaler is the leading pure-play Security Service Edge (SSE) vendor with ZIA/ZPA, competing head-on with Cisco Umbrella/Cisco Secure Access for enterprise SSE and SASE deployments.
• Palo Alto Networks (Prisma SASE): Palo Alto Networks' Prisma Access competes directly with Cisco Umbrella's Secure Internet Access and ZTNA offerings as a bundled SASE platform targeting large enterprises.
• Cloudflare: Cloudflare One competes with Cisco Umbrella across DNS-layer filtering, Secure Web Gateway, CASB, and Zero Trust, often at materially lower list prices for greenfield SASE buyers.
• Netskope: Netskope is a direct SSE/SASE peer, overlapping with Umbrella on SWG, CASB, DLP, and ZTNA, and frequently shortlists against Cisco Secure Access in enterprise evaluations.
• Infoblox: Infoblox is a direct DNS-layer security and recursive DNS infrastructure peer, offering BloxOne Threat Defense that overlaps with Cisco Umbrella's DNS Security Essentials/Advantage packages.

Emerging players

• Menlo Security: Menlo Security specializes in Remote Browser Isolation (RBI) and is a direct feature-level peer to Umbrella's RBI module, often bundled into adjacent SASE platforms competing with Cisco.

Broad incumbents

• Fortinet: Fortinet is a broad networking and security incumbent offering FortiSASE and FortiGate, competing end-to-end with Cisco Umbrella/Secure Access within and outside the Cisco installed base.
• Check Point Software: Check Point's Harmony SASE and Quantum security portfolio overlap with Cisco Umbrella's SWG, ZTNA, and cloud-delivered firewall capabilities for enterprise customers.
• Akamai: Akamai's Guardicore, Enterprise Application Access, and cloud security services compete with Cisco Umbrella in segments such as ZTNA, microsegmentation, and DNS-aware traffic inspection.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat7 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/CiscoUmbrella
• YouTubeyoutube.com/channel/UCqZ3pD7tVVcfUj8k5MYcp0Q
• Facebookfacebook.com/CiscoUmbrella
• LinkedInlinkedin.com/company/cisco

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cisco Umbrella