Thales e-Security
Thales e-Security is the cybersecurity division of Thales Group, providing data security, application security, identity management, AI security, and software monetization platforms to over 30,000 organizations across financial services, government, healthcare, and other regulated verticals worldwide.
- Company typePrivate
- Founded1920
- HeadquartersPlantation, United States
- Headcount5,001–10,000
- GTM typeB2B
- OfferingSoftware
What Thales e-Security does
Thales e-Security operates the Cybersecurity Products and Licensing (CPL) division of Thales Group S.A., a publicly traded French multinational on Euronext Paris. The business provides data security, application security, identity and access management, AI security, and software monetization solutions to more than 30,000 organizations globally, with deep penetration in financial services, government and defense, healthcare, retail, telecommunications, and ISVs. Its portfolio is organized around five core platforms: AI Security Fabric (securing agentic AI and LLM applications), CipherTrust Data Security Platform (data discovery, classification, encryption, and key management), Imperva Application Security Platform (WAF, bot protection, API security, DDoS mitigation), OneWelcome Identity Platform (CIAM, workforce, B2B identity), and Sentinel Software Monetization Platform (software licensing and IP protection). The company also designs and manufactures its own FIDO2 hardware security keys, PKI smart cards, and Luna Hardware Security Modules, providing hardware-rooted cryptographic trust certified to FIPS 140-2/3 and Common Criteria.
Revenue is generated through a mix of subscription and platform licensing (CipherTrust, OneWelcome, SafeNet Trusted Access, Imperva), hardware sales (Luna HSMs), software licensing and entitlements (Sentinel), managed and cloud-delivered services (Data Protection on Demand / Luna Cloud HSM), and professional services. Go-to-market combines direct enterprise field sales for regulated verticals, a multi-tier Accelerate Partner Network (channel resellers, MSPs, OEMs, advisory, technology partners), self-serve marketplace provisioning for cloud HSM services, and product-led free trials for mid-market. Thales acquired Gemalto in 2019 (folding SafeNet into the portfolio) and Imperva in 2023 (adding application security), and in 2026 was named Google Cloud Partner of the Year for Sovereign Cloud and joined the HPE Unleash AI partner program to extend its AI Security Fabric into enterprise AI infrastructure.
Thales e-Security firmographics
Firmographics- Name
- Thales e-Security
- Legal name
- Thales Group S.A.
- Website
- https://cpl.thalesgroup.com
- Company type
- Private
- Founded year
- 1920
- Operating status
- Operating
- Headcount range
- 5,001–10,000 employees
- Short description
- Thales e-Security is the cybersecurity division of Thales Group, providing data security, application security, identity management, AI security, and software monetization platforms to over 30,000 organizations across financial services, government, healthcare, and other regulated verticals worldwide.
- Ownership category
- akta.pro rank
Thales e-Security industry classification
Industry- Product category
- Cybersecurity Software & Services
- NAICS
- Security Systems Services (except Locksmiths) (561621), Security Systems Services (56162)
- SIC
- Services-Detective, Guard & Armored Car Services (7381)
- akta.pro primary industry
- Confidential Computing & Hardware-backed Protection (TEE/HSM) (HDADAFAJ)
- akta.pro secondary industries
- Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD), POS Security, Encryption & Key Management (P2PE, HSM, Key Injection) (FSAMADAK)
Keywords
Where Thales e-Security is headquartered
LocationHeadquarters
- HQ city
- Plantation
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Thales e-Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Supply Chain, Infrastructure, Operations
Revenue model
- Cybersecurity Software & Platform Subscriptions: Thales generates recurring subscription revenue from its CipherTrust Data Security Platform, OneWelcome Identity Platform, SafeNet Trusted Access (STA), and Imperva application security platforms. These are sold as annual or multi-year subscriptions with tiered feature sets, driving predictable recurring revenue with land-and-expand dynamics as organizations extend protection across data, applications, and identities.
- Hardware Security Module (HSM) Sales: Thales sells physical Luna HSM appliances (general purpose and payment HSMs) as one-time perpetual licenses or with associated support contracts. Luna Cloud HSM services provide a managed services variant for cloud deployments, blending hardware and subscription economics.
- Software Monetization (Sentinel) Licensing & Entitlements: The Sentinel platform generates revenue through software licensing, entitlement management, and IP protection solutions. This includes flexible pricing model support for ISVs and software companies, typically sold as subscription or perpetual licenses with professional services for implementation.
- Professional Services & Support: Thales generates professional services revenue through training services, technical training, and professional services engagements for deployment, integration, and compliance implementation across its product portfolio.
- Managed Services (Data Protection on Demand): Data Protection on Demand provides cloud-based HSM and key management as a service through a marketplace model, with consumption-based and subscription pricing tiers, serving organizations that prefer opex over capex.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Thales offers tiered subscription and consumption-based pricing across platforms. CipherTrust Data Security Platform, SafeNet Trusted Access, OneWelcome Identity Platform, and Sentinel are offered via annual or multi-year subscriptions with volume-based tiers. Data Protection on Demand provides marketplace-based consumption pricing with 'Sign Up Now' self-service provisioning. |
Go-to-market motion4 records
Distribution channels8 records
Marketing channels13 records
Thales e-Security product offering
Product offeringCore offering
Thales e-Security sells cybersecurity products and platforms that protect data, applications, identities, and software across enterprise and cloud environments. Its portfolio spans the CipherTrust Data Security Platform (encryption, key management, tokenization), the Imperva Application Security Platform (WAF, bot/API/DDoS protection), the OneWelcome Identity Platform (CIAM and workforce IAM), the Sentinel Software Monetization Platform (licensing and entitlement management), the AI Security Fabric, and Luna Hardware Security Modules including FIDO2 security keys and PKI smart cards.
Product overview
Thales e-Security offers a multi-platform portfolio of cybersecurity solutions organized around five core platforms: AI Security Fabric (securing agentic AI and LLM applications), CipherTrust Data Security Platform (data discovery, encryption, key management, and secrets management), Imperva Application Security Platform (WAF, API security, bot protection, DDoS mitigation), OneWelcome Identity Platform (CIAM for customer, B2B, and workforce identities), and Sentinel Software Monetization Platform (software licensing and IP protection). The CipherTrust platform includes specialized modules for transparent encryption, application data protection, tokenization, database protection, HSMs, and cloud-based key management. The Imperva platform provides web application firewall, advanced bot protection, unified API security, and DDoS protection. Identity solutions span SafeNet Trusted Access (cloud SSO/MFA), MobilePASS+ authenticator apps, FIDO2 passkeys and security keys, OTP tokens, smart cards, and identity orchestration. The portfolio addresses enterprise security needs across AI, data, applications, identity, and software monetization.
Differentiator
Problem solved
Functional benefit
Brands
- CipherTrust: Data Security Platform including encryption, key management, and data discovery
- SafeNet
- Luna HSM
- Sentinel
- OneWelcome
- Imperva
- AI Security Fabric
Products and services
- AI Security Fabric Unified platform providing AI runtime security for agentic AI and LLM-powered applications, including RAG Data Security, AI Application Security, prompt injection protection, and AI guardrails. Targeted at enterprises deploying AI at scale.
- CipherTrust Data Security Platform Enterprise data security platform providing data discovery, classification, encryption, tokenization, masking, and key management for sensitive data across on-premises, cloud, and hybrid environments. Targeted at enterprises needing data protection and compliance.
- Imperva Application Security Platform Comprehensive application security platform protecting mission-critical applications, APIs and websites from bots, DDoS, and supply chain attacks, including WAF, advanced bot protection, unified API security, DDoS protection, client-side protection, and account takeover protection.
- OneWelcome Identity Platform Unified identity platform managing Customer (B2C), Business (B2B), Gig Worker, and Workforce/Employee identities with MFA, SSO, identity lifecycle management, identity orchestration, consent management, and risk-based authentication.
- Sentinel Software Monetization Platform Software licensing, entitlement management, rights management system, software and IP protection, and software usage intelligence platform for ISVs enabling flexible pricing models while protecting software from abuse or theft.
- Thales Luna Hardware Security Modules Tamper-resistant hardware devices providing cryptographic key protection, including General Purpose HSMs and Payment HSMs certified to FIPS 140-2/3, Common Criteria, and eIDAS standards. Sold to enterprises and payment processors needing hardware-rooted key protection.
- Luna Cloud HSM Services Cloud-hosted hardware security module services for organizations needing cryptographic key protection without on-premises hardware, delivered via the Data Protection on Demand marketplace.
- CipherTrust Data Protection on Demand Cloud-based data protection services including Luna Cloud HSM, Key Management and Secrets Management available via self-service marketplace with consumption and subscription pricing.
- SafeNet Trusted Access Cloud-based SSO and MFA platform for workforce identity, providing adaptive access control, risk-based authentication, FIDO2 support, and integration with various authenticators.
- SafeNet MobilePASS+ Mobile and desktop authenticator app supporting push authentication and OTP (one-time password) for multi-factor authentication across Android, iOS, Windows, macOS and Apple Watch.
- FIDO Passkeys and Devices Phishing-resistant FIDO2 security keys, biometric smart cards, and device-bound passkeys for secure passwordless authentication, compliant with PSD2, GDPR, PCI DSS, FIPS 140-2/3, Common Criteria, and eIDAS.
- SafeNet IDPrime Smart Cards Java-based PKI smart cards for secure authentication and digital identity, fully functional with Versasec vSEC:CMS for card lifecycle management.
- Thales Authenticator Lifecycle Manager Manages the complete lifecycle of authenticators from provisioning through revocation, enabling secure delivery and management of FIDO2 authenticator credentials at scale. Launched 2026-02.
- Post-Quantum Crypto Agility Prepares enterprises for post-quantum cryptography threats including harvest-now-decrypt-later attacks, including the Post-Quantum Crypto Agility assessment tool and migration capabilities. Launched 2026.
Quantifiable outcome
- 30,000+ organizations worldwide rely on Thales for cybersecurity
- +10 more outcomes
Companies that use Thales e-Security
Customer profileNamed customers6 records
Segments15 records
Ideal customer profiles5 records
Thales e-Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability9 records
Feature10 records
Thales e-Security partnerships and signals
Strategic signalPartnerships
Four partnerships are on record, tiered core and minor.
- Hewlett Packard Enterprise (HPE)coreThales joined the HPE Unleash AI partner program, a curated ecosystem combining ISV solutions validated with HPE AI systems including HPE Private Cloud AI and HPE AI Factory with NVIDIA. The collaboration extends Thales AI Security Fabric capabilities (CipherTrust Data Security Platform, Luna HSMs, Imperva AI Application Security) into HPE's enterprise AI infrastructure, providing joint AI security use cases covering centralized key management with hardware root of trust, trusted AI data repositories, secure AI pipelines for regulated data, Kubernetes persistent storage protection, AI guardrails and prompt injection protection, and secure secrets for AI pipelines. Thales and HPE collaborate across compute, storage, networking, hybrid cloud, and data protection. Robin Braun, VP of AI Business Development at HPE, and Todd Moore, Global VP of Data Security Products at Thales, publicly endorsed the partnership.
- Google CloudcoreThales was named the 2026 Google Cloud Partner of the Year for Sovereign Cloud / Infrastructure Modernization. Thales offers Imperva for Google Cloud — delivering enterprise-grade application security capabilities directly into Google Cloud environments. SafeNet Trusted Access is also available on Google Cloud Marketplace. The partnership targets sovereign cloud deployments and enterprise application security for GCP customers.
- VersasecminorThales partners with Versasec to offer vSEC:CMS, a flexible smart card management system for enterprise PKI-based authentication and physical access deployments. vSEC:CMS is fully functional with Thales IDPrime MD, IDPrime PIV, and SafeNet eTokens. Distributed through the Thales Accelerate Partner Network. The partnership enables organizations to issue smart cards, personalize with authentication credentials, and manage lifecycle from a single product.
- NVIDIAcoreThales AI Security Fabric integrates with the NVIDIA AI Computing by HPE portfolio (part of HPE Unleash AI with NVIDIA). Thales and NVIDIA together provide AI security capabilities spanning data protection, runtime AI security, encryption, centralized key management, and hardware-rooted trust for scalable AI deployments from enterprises to model builders and sovereign organizations.
Scale indicators10 records
Recent moves6 records
Expansion highlights6 records
Thales e-Security competitors and assessment
Company assessmentDirect peers
- Okta: Okta is a direct competitor in workforce and customer identity management, competing with SafeNet Trusted Access and OneWelcome Identity Platform in cloud SSO, MFA, and CIAM.
- Entrust: Entrust directly competes with Thales in HSMs, PKI smart cards, and identity/authentication solutions for enterprise and government customers, with overlapping FIDO2, certificate management, and encryption key management offerings.
- Cloudflare: Cloudflare directly competes with the Imperva Application Security Platform in WAF, DDoS protection, API security, and bot management, with overlapping enterprise application security customers.
- Yubico: Yubico directly competes with Thales in FIDO2 hardware security keys and passkey authentication, with overlapping enterprise passwordless and phishing-resistant authentication customers.
- F5 (Shape Security): F5 (post-Shape Security acquisition) competes with Imperva in application security, bot protection, and API security, with overlapping enterprise web application firewall customers.
- CyberArk: CyberArk competes with Thales in privileged access management, secrets management, and identity security — overlapping directly with CipherTrust Secrets Management and HSM-based credential protection.
Broad incumbents
- Palo Alto Networks: Palo Alto Networks competes with Thales across multiple categories including Prisma Cloud (DSPM/data security), Cortex (application security), and IAM, operating as a broad cybersecurity platform incumbent with overlapping coverage.
- AWS Key Management Service / CloudHSM: AWS KMS and CloudHSM compete directly with CipherTrust Key Management and Luna HSM for cloud-resident key management and HSM workloads, particularly for AWS-native enterprise customers.
Emerging players
- HashiCorp: HashiCorp Vault competes directly with CipherTrust Secrets Management for application secrets, API keys, and tokens in cloud-native and DevSecOps environments, particularly with developer and platform engineering buyers.
- BeyondTrust: BeyondTrust competes with Thales in privileged access management and identity security, with overlapping enterprise PAM, secrets management, and remote access customers in regulated verticals.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Thales e-Security social profiles
Digital presenceThales e-Security compliance and trust
Trust signalCompliance32 records
Thales e-Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Thales e-Security leadership team
Management profileNumber of profiles
Profiles10 records
Thales e-Security subsidiaries and ownership
Company hierarchySubsidiaries1 record
Thales e-Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Thales e-Security M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Thales e-Security
What does Thales e-Security do?
Thales e-Security sells cybersecurity products and platforms that protect data, applications, identities, and software across enterprise and cloud environments. Its portfolio spans the CipherTrust Data Security Platform (encryption, key management, tokenization), the Imperva Application Security Platform (WAF, bot/API/DDoS protection), the OneWelcome Identity Platform (CIAM and workforce IAM), the Sentinel Software Monetization Platform (licensing and entitlement management), the AI Security Fabric, and Luna Hardware Security Modules including FIDO2 security keys and PKI smart cards.
Is Thales e-Security a public or private company?
Thales e-Security is a private company. It is classified as corporate owned and is currently operating.
When was Thales e-Security founded?
Thales e-Security was founded in 1920. It employs 5,001 to 10,000 people.
Where is Thales e-Security based?
Thales e-Security is headquartered in Plantation, United States, in the North America region.
How does Thales e-Security make money?
Five revenue lines are on record. Cybersecurity Software & Platform Subscriptions are the primary driver. The others are hardware Security Module (HSM) Sales, software Monetization (Sentinel) Licensing & Entitlements, professional Services & Support and managed Services (Data Protection on Demand).
Who are Thales e-Security's main competitors?
Direct peers on record are Okta, Entrust, Cloudflare, Yubico, F5 (Shape Security) and CyberArk. Broad incumbents are Palo Alto Networks and AWS Key Management Service / CloudHSM. Emerging players are HashiCorp and BeyondTrust.
Does Thales e-Security have an API?
Yes. Thales offers API-based data protection through CipherTrust RESTful Data Protection, which enables developers to integrate encryption, tokenization, and data security capabilities into applications via RESTful APIs. The Sentinel software monetization platform includes documentation for developers at docs.sentinel.thalesgroup.com. However, no specific API documentation URL, authentication method, rate limits, or SDK details are provided in the source material.
What industry is Thales e-Security in?
Thales e-Security's product category is Cybersecurity Software & Services. Its primary akta.pro industry code is HDADAFAJ, Confidential Computing & Hardware-backed Protection (TEE/HSM), with a secondary code of HDADAFAD, Secrets Management (Passwords, API Keys, Tokens). Its NAICS code is 561621 and its SIC code is 7381.