Thales e-Security

Cybersecurity Software & Servicescpl.thalesgroup.com

Thales e-Security is the cybersecurity division of Thales Group, providing data security, application security, identity management, AI security, and software monetization platforms to over 30,000 organizations across financial services, government, healthcare, and other regulated verticals worldwide.

Company typePrivate
Founded1920
HeadquartersPlantation, United States
Headcount5,001–10,000
GTM typeB2B
OfferingSoftware

What Thales e-Security does

Thales e-Security operates the Cybersecurity Products and Licensing (CPL) division of Thales Group S.A., a publicly traded French multinational on Euronext Paris. The business provides data security, application security, identity and access management, AI security, and software monetization solutions to more than 30,000 organizations globally, with deep penetration in financial services, government and defense, healthcare, retail, telecommunications, and ISVs. Its portfolio is organized around five core platforms: AI Security Fabric (securing agentic AI and LLM applications), CipherTrust Data Security Platform (data discovery, classification, encryption, and key management), Imperva Application Security Platform (WAF, bot protection, API security, DDoS mitigation), OneWelcome Identity Platform (CIAM, workforce, B2B identity), and Sentinel Software Monetization Platform (software licensing and IP protection). The company also designs and manufactures its own FIDO2 hardware security keys, PKI smart cards, and Luna Hardware Security Modules, providing hardware-rooted cryptographic trust certified to FIPS 140-2/3 and Common Criteria.

Revenue is generated through a mix of subscription and platform licensing (CipherTrust, OneWelcome, SafeNet Trusted Access, Imperva), hardware sales (Luna HSMs), software licensing and entitlements (Sentinel), managed and cloud-delivered services (Data Protection on Demand / Luna Cloud HSM), and professional services. Go-to-market combines direct enterprise field sales for regulated verticals, a multi-tier Accelerate Partner Network (channel resellers, MSPs, OEMs, advisory, technology partners), self-serve marketplace provisioning for cloud HSM services, and product-led free trials for mid-market. Thales acquired Gemalto in 2019 (folding SafeNet into the portfolio) and Imperva in 2023 (adding application security), and in 2026 was named Google Cloud Partner of the Year for Sovereign Cloud and joined the HPE Unleash AI partner program to extend its AI Security Fabric into enterprise AI infrastructure.

Thales e-Security firmographics

Firmographics

Name: Thales e-Security
Legal name: Thales Group S.A.
Website: https://cpl.thalesgroup.com
Company type: Private
Founded year: 1920
Operating status: Operating
Headcount range: 5,001–10,000 employees
Short description: Thales e-Security is the cybersecurity division of Thales Group, providing data security, application security, identity management, AI security, and software monetization platforms to over 30,000 organizations across financial services, government, healthcare, and other regulated verticals worldwide.
Ownership category
akta.pro rank

Thales e-Security industry classification

Industry

Product category: Cybersecurity Software & Services
NAICS: Security Systems Services (except Locksmiths) (561621), Security Systems Services (56162)
SIC: Services-Detective, Guard & Armored Car Services (7381)
akta.pro primary industry: Confidential Computing & Hardware-backed Protection (TEE/HSM) (HDADAFAJ)
akta.pro secondary industries: Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD), POS Security, Encryption & Key Management (P2PE, HSM, Key Injection) (FSAMADAK)

Keywords

Data security platforms
Identity access management
Hardware security modules
Application security solutions
Software monetization

Where Thales e-Security is headquartered

Location

Headquarters

HQ city: Plantation
HQ country: United States
HQ region: North America

Offices1 record

Markets served

Thales e-Security business model

Business model

GTM type: B2B
Offering type: Software
Cost components: Personnel, Technology or R&D, Marketing or Sales, Supply Chain, Infrastructure, Operations

Revenue model

Cybersecurity Software & Platform Subscriptions: Thales generates recurring subscription revenue from its CipherTrust Data Security Platform, OneWelcome Identity Platform, SafeNet Trusted Access (STA), and Imperva application security platforms. These are sold as annual or multi-year subscriptions with tiered feature sets, driving predictable recurring revenue with land-and-expand dynamics as organizations extend protection across data, applications, and identities.
Hardware Security Module (HSM) Sales: Thales sells physical Luna HSM appliances (general purpose and payment HSMs) as one-time perpetual licenses or with associated support contracts. Luna Cloud HSM services provide a managed services variant for cloud deployments, blending hardware and subscription economics.
Software Monetization (Sentinel) Licensing & Entitlements: The Sentinel platform generates revenue through software licensing, entitlement management, and IP protection solutions. This includes flexible pricing model support for ISVs and software companies, typically sold as subscription or perpetual licenses with professional services for implementation.
Professional Services & Support: Thales generates professional services revenue through training services, technical training, and professional services engagements for deployment, integration, and compliance implementation across its product portfolio.
Managed Services (Data Protection on Demand): Data Protection on Demand provides cloud-based HSM and key management as a service through a marketplace model, with consumption-based and subscription pricing tiers, serving organizations that prefer opex over capex.

Pricing tiers

Model	Billing	Price
Subscription	Annual	Thales offers tiered subscription and consumption-based pricing across platforms. CipherTrust Data Security Platform, SafeNet Trusted Access, OneWelcome Identity Platform, and Sentinel are offered via annual or multi-year subscriptions with volume-based tiers. Data Protection on Demand provides marketplace-based consumption pricing with 'Sign Up Now' self-service provisioning.

Go-to-market motion4 records

Distribution channels8 records

Marketing channels13 records

Thales e-Security product offering

Product offering

Core offering

Thales e-Security sells cybersecurity products and platforms that protect data, applications, identities, and software across enterprise and cloud environments. Its portfolio spans the CipherTrust Data Security Platform (encryption, key management, tokenization), the Imperva Application Security Platform (WAF, bot/API/DDoS protection), the OneWelcome Identity Platform (CIAM and workforce IAM), the Sentinel Software Monetization Platform (licensing and entitlement management), the AI Security Fabric, and Luna Hardware Security Modules including FIDO2 security keys and PKI smart cards.

Product overview

Thales e-Security offers a multi-platform portfolio of cybersecurity solutions organized around five core platforms: AI Security Fabric (securing agentic AI and LLM applications), CipherTrust Data Security Platform (data discovery, encryption, key management, and secrets management), Imperva Application Security Platform (WAF, API security, bot protection, DDoS mitigation), OneWelcome Identity Platform (CIAM for customer, B2B, and workforce identities), and Sentinel Software Monetization Platform (software licensing and IP protection). The CipherTrust platform includes specialized modules for transparent encryption, application data protection, tokenization, database protection, HSMs, and cloud-based key management. The Imperva platform provides web application firewall, advanced bot protection, unified API security, and DDoS protection. Identity solutions span SafeNet Trusted Access (cloud SSO/MFA), MobilePASS+ authenticator apps, FIDO2 passkeys and security keys, OTP tokens, smart cards, and identity orchestration. The portfolio addresses enterprise security needs across AI, data, applications, identity, and software monetization.

Differentiator

Problem solved

Functional benefit

Brands

CipherTrust: Data Security Platform including encryption, key management, and data discovery
SafeNet
Luna HSM
Sentinel
OneWelcome
Imperva
AI Security Fabric

Products and services

AI Security Fabric Unified platform providing AI runtime security for agentic AI and LLM-powered applications, including RAG Data Security, AI Application Security, prompt injection protection, and AI guardrails. Targeted at enterprises deploying AI at scale.
CipherTrust Data Security Platform Enterprise data security platform providing data discovery, classification, encryption, tokenization, masking, and key management for sensitive data across on-premises, cloud, and hybrid environments. Targeted at enterprises needing data protection and compliance.
Imperva Application Security Platform Comprehensive application security platform protecting mission-critical applications, APIs and websites from bots, DDoS, and supply chain attacks, including WAF, advanced bot protection, unified API security, DDoS protection, client-side protection, and account takeover protection.
OneWelcome Identity Platform Unified identity platform managing Customer (B2C), Business (B2B), Gig Worker, and Workforce/Employee identities with MFA, SSO, identity lifecycle management, identity orchestration, consent management, and risk-based authentication.
Sentinel Software Monetization Platform Software licensing, entitlement management, rights management system, software and IP protection, and software usage intelligence platform for ISVs enabling flexible pricing models while protecting software from abuse or theft.
Thales Luna Hardware Security Modules Tamper-resistant hardware devices providing cryptographic key protection, including General Purpose HSMs and Payment HSMs certified to FIPS 140-2/3, Common Criteria, and eIDAS standards. Sold to enterprises and payment processors needing hardware-rooted key protection.
Luna Cloud HSM Services Cloud-hosted hardware security module services for organizations needing cryptographic key protection without on-premises hardware, delivered via the Data Protection on Demand marketplace.
CipherTrust Data Protection on Demand Cloud-based data protection services including Luna Cloud HSM, Key Management and Secrets Management available via self-service marketplace with consumption and subscription pricing.
SafeNet Trusted Access Cloud-based SSO and MFA platform for workforce identity, providing adaptive access control, risk-based authentication, FIDO2 support, and integration with various authenticators.
SafeNet MobilePASS+ Mobile and desktop authenticator app supporting push authentication and OTP (one-time password) for multi-factor authentication across Android, iOS, Windows, macOS and Apple Watch.
FIDO Passkeys and Devices Phishing-resistant FIDO2 security keys, biometric smart cards, and device-bound passkeys for secure passwordless authentication, compliant with PSD2, GDPR, PCI DSS, FIPS 140-2/3, Common Criteria, and eIDAS.
SafeNet IDPrime Smart Cards Java-based PKI smart cards for secure authentication and digital identity, fully functional with Versasec vSEC:CMS for card lifecycle management.
Thales Authenticator Lifecycle Manager Manages the complete lifecycle of authenticators from provisioning through revocation, enabling secure delivery and management of FIDO2 authenticator credentials at scale. Launched 2026-02.
Post-Quantum Crypto Agility Prepares enterprises for post-quantum cryptography threats including harvest-now-decrypt-later attacks, including the Post-Quantum Crypto Agility assessment tool and migration capabilities. Launched 2026.

Quantifiable outcome

30,000+ organizations worldwide rely on Thales for cybersecurity
+10 more outcomes

Companies that use Thales e-Security

Customer profile

Named customers6 records

Segments15 records

Ideal customer profiles5 records

Thales e-Security technology and API

Technology

Technology focussed Yes

API detail

Has API: Yes
API docs
API detail

Core technology

AI maturity

App detail

AI capability9 records

Feature10 records

Thales e-Security partnerships and signals

Strategic signal

Partnerships

Four partnerships are on record, tiered core and minor.

Hewlett Packard Enterprise (HPE)coreStrategic or Co-development Partner · 25 June 2026Thales joined the HPE Unleash AI partner program, a curated ecosystem combining ISV solutions validated with HPE AI systems including HPE Private Cloud AI and HPE AI Factory with NVIDIA. The collaboration extends Thales AI Security Fabric capabilities (CipherTrust Data Security Platform, Luna HSMs, Imperva AI Application Security) into HPE's enterprise AI infrastructure, providing joint AI security use cases covering centralized key management with hardware root of trust, trusted AI data repositories, secure AI pipelines for regulated data, Kubernetes persistent storage protection, AI guardrails and prompt injection protection, and secure secrets for AI pipelines. Thales and HPE collaborate across compute, storage, networking, hybrid cloud, and data protection. Robin Braun, VP of AI Business Development at HPE, and Todd Moore, Global VP of Data Security Products at Thales, publicly endorsed the partnership.
Google CloudcoreGTM or Marketing Partner · 1 January 2026Thales was named the 2026 Google Cloud Partner of the Year for Sovereign Cloud / Infrastructure Modernization. Thales offers Imperva for Google Cloud — delivering enterprise-grade application security capabilities directly into Google Cloud environments. SafeNet Trusted Access is also available on Google Cloud Marketplace. The partnership targets sovereign cloud deployments and enterprise application security for GCP customers.
VersasecminorChannel Partner/ Reseller/ DistributorThales partners with Versasec to offer vSEC:CMS, a flexible smart card management system for enterprise PKI-based authentication and physical access deployments. vSEC:CMS is fully functional with Thales IDPrime MD, IDPrime PIV, and SafeNet eTokens. Distributed through the Thales Accelerate Partner Network. The partnership enables organizations to issue smart cards, personalize with authentication credentials, and manage lifecycle from a single product.
NVIDIAcoreTechnology or IntegrationThales AI Security Fabric integrates with the NVIDIA AI Computing by HPE portfolio (part of HPE Unleash AI with NVIDIA). Thales and NVIDIA together provide AI security capabilities spanning data protection, runtime AI security, encryption, centralized key management, and hardware-rooted trust for scalable AI deployments from enterprises to model builders and sovereign organizations.

Scale indicators10 records

Recent moves6 records

Expansion highlights6 records

Thales e-Security competitors and assessment

Company assessment

Direct peers

Okta: Okta is a direct competitor in workforce and customer identity management, competing with SafeNet Trusted Access and OneWelcome Identity Platform in cloud SSO, MFA, and CIAM.
Entrust: Entrust directly competes with Thales in HSMs, PKI smart cards, and identity/authentication solutions for enterprise and government customers, with overlapping FIDO2, certificate management, and encryption key management offerings.
Cloudflare: Cloudflare directly competes with the Imperva Application Security Platform in WAF, DDoS protection, API security, and bot management, with overlapping enterprise application security customers.
Yubico: Yubico directly competes with Thales in FIDO2 hardware security keys and passkey authentication, with overlapping enterprise passwordless and phishing-resistant authentication customers.
F5 (Shape Security): F5 (post-Shape Security acquisition) competes with Imperva in application security, bot protection, and API security, with overlapping enterprise web application firewall customers.
CyberArk: CyberArk competes with Thales in privileged access management, secrets management, and identity security — overlapping directly with CipherTrust Secrets Management and HSM-based credential protection.

Broad incumbents

Palo Alto Networks: Palo Alto Networks competes with Thales across multiple categories including Prisma Cloud (DSPM/data security), Cortex (application security), and IAM, operating as a broad cybersecurity platform incumbent with overlapping coverage.
AWS Key Management Service / CloudHSM: AWS KMS and CloudHSM compete directly with CipherTrust Key Management and Luna HSM for cloud-resident key management and HSM workloads, particularly for AWS-native enterprise customers.

Emerging players

HashiCorp: HashiCorp Vault competes directly with CipherTrust Secrets Management for application secrets, API keys, and tokens in cloud-native and DevSecOps environments, particularly with developer and platform engineering buyers.
BeyondTrust: BeyondTrust competes with Thales in privileged access management and identity security, with overlapping enterprise PAM, secrets management, and remote access customers in regulated verticals.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

Thales e-Security compliance and trust

Trust signal

Compliance32 records

Thales e-Security financial estimates

Financial estimate

Revenue estimate

Valuation estimate

Thales e-Security leadership team

Management profile

Number of profiles

Profiles10 records

Thales e-Security subsidiaries and ownership

Company hierarchy

Subsidiaries1 record

Thales e-Security funding detail

Funding detail

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

Thales e-Security M&A and investment

M&A and investment

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Thales e-Security

What does Thales e-Security do?

Is Thales e-Security a public or private company?

Thales e-Security is a private company. It is classified as corporate owned and is currently operating.

When was Thales e-Security founded?

Thales e-Security was founded in 1920. It employs 5,001 to 10,000 people.

Where is Thales e-Security based?

Thales e-Security is headquartered in Plantation, United States, in the North America region.

How does Thales e-Security make money?

Five revenue lines are on record. Cybersecurity Software & Platform Subscriptions are the primary driver. The others are hardware Security Module (HSM) Sales, software Monetization (Sentinel) Licensing & Entitlements, professional Services & Support and managed Services (Data Protection on Demand).

Who are Thales e-Security's main competitors?

Direct peers on record are Okta, Entrust, Cloudflare, Yubico, F5 (Shape Security) and CyberArk. Broad incumbents are Palo Alto Networks and AWS Key Management Service / CloudHSM. Emerging players are HashiCorp and BeyondTrust.

Does Thales e-Security have an API?

Yes. Thales offers API-based data protection through CipherTrust RESTful Data Protection, which enables developers to integrate encryption, tokenization, and data security capabilities into applications via RESTful APIs. The Sentinel software monetization platform includes documentation for developers at docs.sentinel.thalesgroup.com. However, no specific API documentation URL, authentication method, rate limits, or SDK details are provided in the source material.

What industry is Thales e-Security in?

Thales e-Security's product category is Cybersecurity Software & Services. Its primary akta.pro industry code is HDADAFAJ, Confidential Computing & Hardware-backed Protection (TEE/HSM), with a secondary code of HDADAFAD, Secrets Management (Passwords, API Keys, Tokens). Its NAICS code is 561621 and its SIC code is 7381.