All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Illumio sells software that stops an intruder moving from one machine to the next inside an enterprise network. A second product, Illumio Insights, reads traffic across cloud and data-center environments for signs of that movement. Microsoft's global chief information security officer is quoted by name on Illumio's site, and its government cloud has carried a federal authorization since August 2024. Its last disclosed funding is a $225 million round from June 2021. In 2022, SDxCentral reported Andrew Rubin putting Illumio at 27 customers paying over $1 million a year. A buyer sees wide enterprise adoption alongside little current outside evidence about how the business is performing.
| Description | Illumio sells software that limits how far an intruder can travel inside an enterprise network. Illumio Segmentation enforces policy across data centers, clouds and endpoints to prevent lateral movement, and Illumio Insights identifies risks, detects attacks and contains threats. | [f1] |
|---|---|---|
| Founded | 2013 | [f2] |
| HQ | Sunnyvale, California, United States | [f3] |
| Funding | $550M total | [f4] |
| Latest funding | $225M Series F led by Thoma Bravo at a $2.75B valuation (June 2021) | [f4] |
| Product | What it does |
|---|---|
| Illumio Segmentation | Enforces per-workload segmentation policy on servers, endpoints and cloud workloads using labels rather than IP addresses, blocking traffic between systems that have no reason to talk. |
| Illumio Insights | Reads east-west traffic across hybrid and multi-cloud environments to score lateral-movement risk, flag suspicious flows, and quarantine affected workloads. |
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
Illumio Segmentation enforces security policies across cloud and network workloads to prevent lateral movement, and Illumio Insights identifies risks, detects attacks and contains threats. These capabilities are mapped to the Cyber Defense Matrix. [f1]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 | Illumio names a specific buyer and a specific failure, and SecurityWeek describes the same mechanism without the company's help, writing that segmentation contains a compromise by allowing only known good connections and denying all else. The figures that size the loss come from Illumio: a $20 million average downtime saving, a 111% return in a Forrester study it commissioned, and a breach-every-11-seconds figure it attributes to Cybersecurity Ventures. No reviewed independent source puts a number on what an uncontained intrusion costs. [s13, s8, s14] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 4/5 | The product pages carry mechanism rather than slogans: enforcement at the host operating system through the Windows Filtering Platform on Windows and iptables on Linux, an agent in user space that needs no reboot, policy built from workload labels instead of addresses, and a draft mode showing what a rule would block. SDxCentral reported that Forrester scored Illumio as differentiated on five of ten criteria including policy management and enforcement, which is an outside check on the scored capability. [s2, s12, s14] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 | Forrester wrote in August 2024 that microsegmentation is a frequent client inquiry topic and demand has never been higher, and that four vendors new to the category had just entered it. That is one kind of buyer-side signal and it is two years old. The other demand evidence is a Gartner Peer Insights rating and a Forrester placement that Illumio publishes itself. No second kind of independently documented buyer-side signal dated within the last year appears in the reviewed sources. [s14, s1] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 4/5 | SecurityWeek names Andrew Rubin and PJ Kirner as the 2013 founders, and a Form D on SEC EDGAR lists both as executive officers alongside four directors. The bench around them carries named prior product work: Ben Verghese spent 13 years at VMware on the ESX Server founding team and delivered VirtualCenter, Mario Espinoza ran SaaS security and data protection at Palo Alto Networks and data loss prevention at Symantec, and Anup Singh took Nimble Storage through an IPO and its sale to HPE. [s13, s15, s5] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 5/5 | Traction is corroborated outside the company and at enterprise scale. TechCrunch reported in 2021 that Illumio said more than 10% of Fortune 100 companies used its technology, naming Morgan Stanley, BNP Paribas and Salesforce, and SDxCentral reported in 2022 that bookings had risen nearly 100% year over year on more than 140 new customers. Microsoft's global chief information security officer is quoted by name on the customer page, and AWS Marketplace publishes contract prices for the platform. [s11, s12, s7, s19] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 | The raise is proportional to the motion and shipping is visible, while efficiency itself stays unconfirmed. SecurityWeek recorded $225 million in June 2021 taking the total past $550 million, and the reviewed sources show no round since. What the record does show in that period is a second product, a FedRAMP authorization for the government cloud dated August 2024, and marketplace distribution. No revenue, margin or growth efficiency measure appears anywhere in the reviewed sources. [s10, s17, s19] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 | Outside parties place Illumio without its help and place it the same way. Forrester runs a dedicated microsegmentation evaluation and its 2024 blog discusses Illumio alongside Akamai Guardicore, SecurityWeek calls it a zero trust segmentation provider, and SDxCentral reported in 2022 that Forrester had named it a leader in the earlier evaluation. The current leader placement, for the third quarter of 2026, reaches the public record only through Illumio's own pages, so the independently reported placement is the 2022 one rather than the current one. [s14, s10, s12, s1] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 | Absorption pressure is documented rather than hypothetical. Forrester names Broadcom selling microsegmentation for virtualized environments from its VMware acquisition, Hewlett Packard Enterprise selling a network-based version from Aruba, and Cisco attempting to leapfrog the industry with Hypershield. Friction exists on the other side: SecurityWeek reported that a large enterprise rollout can take three months, and FedRAMP lists a Moderate authorization since 2024. Neither is an asset bundling could not eventually match. [s14, s13, s17] |
Segmentation contains a compromise rather than preventing one, and SecurityWeek made that case independently in 2020. It describes segmentation as allowing only known good connections between machines and denying everything else, with the endpoint as the weak point because that is where an intruder usually lands first. Illumio frames the same idea as breach containment and tells buyers that breaches are inevitable while disasters are optional.
Forrester supplies the demand side. Its August 2024 blog announcing the microsegmentation evaluation calls the topic a frequent client inquiry and says demand has never been higher, and it describes enterprises segmenting public cloud workloads, microservices, operational technology and healthcare environments rather than only data centers. That is an analyst's account of buyer interest rather than a count of purchases.
The figures that size the loss come from Illumio. Its pages carry a $20 million average downtime saving among early adopters of microsegmentation, a 111% composite return in a Forrester Total Economic Impact study of Illumio, and a breach-every-11-seconds figure attributed to Cybersecurity Ventures. No reviewed independent source puts a number on what an uncontained intrusion costs an enterprise. [s13, s14, s8, s4]
Illumio Segmentation enforces policy on the host rather than in the network. The product page describes enforcement through the Windows Filtering Platform on Windows and iptables on Linux, an agent that runs in user space so a deployment needs no kernel patch or reboot, and a tamper-proof agent so a compromised workload cannot switch its own policy off. Illumio builds policy from workload labels instead of IP addresses, so a rule follows a workload between clouds and racks, and a draft mode shows what a rule would block before anyone turns it on.
Illumio Insights covers the detection half. It reads east-west traffic across hybrid and multi-cloud environments, scores lateral-movement risk against compliance mandates through a feature the company calls Network Posture, and offers one-click containment of a workload it flags. Illumio describes deployment as agentless and push-button across millions of workloads, and the reviewed independent sources do not test that claim.
Outside scrutiny of the code is on the record. The National Vulnerability Database carries CVE-2023-5183, an unsafe JSON deserialization flaw in the Illumio policy compute engine that allows an authenticated attacker to run arbitrary code, which NVD analysts scored 8.8. Illumio's own advisory index lists that September 2023 authenticated remote-code-execution advisory alongside a March 2025 Ruby SAML authentication bypass, and the 2025 advisory names affected and fixed versions and offers disabling SAML or restricting source IP addresses as interim mitigations. [s2, s3, s16, s9]
Forrester's own 2024 blog places Illumio among the incumbents of the microsegmentation category and names who else sells the capability. It groups Illumio with Akamai Guardicore and credits Illumio with adding layer 7 support and features around incident response. Broadcom delivers microsegmentation for virtualized environments from its VMware acquisition, Hewlett Packard Enterprise provides a network-based version from Aruba, and teams at Cisco are attempting to leapfrog the industry with a technology it calls Hypershield.
Akamai is the named head-to-head, and one placement is independently reported. SDxCentral wrote in 2022 that Forrester had named Illumio a leader in the earlier microsegmentation report alongside Akamai Technologies, with Aruba, VMware and Cisco as strong performers, and that the report credited Illumio with differentiation in five of ten scoring categories including policy management and enforcement. Forrester's 2024 post adds four vendors new to the evaluation, two of them working at the network switch.
Illumio's own claim to difference is operational. Andrew Rubin told SDxCentral that Cisco and VMware had competed with Illumio since it came to market and sit next to it in almost every customer environment, and that the biggest difference is the size, scale and maturity of Illumio's deployments. The reviewed sources carry no independent comparison of deployment scale across these vendors. [s14, s12]
Named enterprise references sit at the top of the market. Illumio's customer page quotes Microsoft's global chief information security officer, Igor Tsyganskiy, saying no other segmentation product would work at Microsoft's scale, and its trust center lists Oracle, Morgan Stanley, Cathay Pacific, ServiceNow, Alaska Airlines and eBay among organizations that have reviewed the company. Customer stories cover QBE Insurance, ADT and Houston Eye, whose story is framed around HIPAA compliance.
The independent scale reporting is four to five years old. TechCrunch reported in 2021 that Illumio said more than 10% of Fortune 100 companies used its technology, naming Morgan Stanley, BNP Paribas and Salesforce. SDxCentral reported in 2022 that bookings had risen nearly 100% year over year, that Illumio had added more than 140 customers in the fiscal year ending in January, and that Andrew Rubin counted 27 customers paying over $1 million a year.
Distribution runs through cloud marketplaces as well as direct sales. The AWS Marketplace listing sells a 12-month contract at $109,000 per 250 secured workloads with the platform and $38,400 per 100 public cloud workloads. SecurityWeek reported in 2020 that a customer could obtain Illumio's endpoint agent from a CrowdStrike Falcon provider and integrate it into Falcon, and SDxCentral reported the company planning to push further into the mid-market, managed service providers and federal government. [s7, s6, s11, s12, s19, s13]
The founders are documented outside the company's own pages. SecurityWeek names Andrew Rubin as chief executive and PJ Kirner as chief technology officer and dates the founding to 2013, and a Form D on SEC EDGAR lists Rubin and Kirner as executive officers of Illumio, Inc. at 920 Deguigne Drive in Sunnyvale. Rubin signed that filing as chief executive in July 2021 and holds the same role on the current leadership page.
The executive bench carries named prior product work. Ben Verghese, the chief technology officer, spent 13 years at VMware on the ESX Server founding team and delivered VirtualCenter from its inception. Mario Espinoza, the chief product officer, ran SaaS security and data protection at Palo Alto Networks and data loss prevention at Symantec. Anup Singh, the chief financial officer, took Nimble Storage through an IPO and its acquisition by HPE.
The board adds outside standing. Steve Herrod, formerly chief technology officer of VMware, and John Hinshaw, formerly chief operating officer of HSBC, sit on it alongside George Tenet, the 18th Director of the Central Intelligence Agency. John Kindervag, whom Illumio bills as the creator of Zero Trust, works at Illumio as chief evangelist.
Two funding totals appear. Illumio's leadership page states that the company has raised $582.5 million to date from investors including Andreessen Horowitz, Accel, General Catalyst, Thoma Bravo and J.P. Morgan Asset Management. SecurityWeek reported on June 24, 2021 that the $225 million round led by Thoma Bravo took the total past $550 million. No outside publication in the reviewed sources puts a later figure on it, and the company's larger total appears only on its own page. [s13, s15, s5, s8, s10]
Illumio publishes a trust center and it is populated. The SafeBase-hosted portal at trust.illumio.com lists Common Criteria, FedRAMP Moderate, FIPS 140-2, ISO/IEC 27001:2022, ISO/IEC 27701:2019 and SOC 2 Type 2, and offers a SOC 2 report, a PCI DSS report and a penetration test report behind an access request.
The federal authorization is verifiable outside Illumio's own pages. The FedRAMP Marketplace lists Illumio Government Cloud as FedRAMP Certified as of August 21, 2024, at Class C, the Moderate level, on the agency path with one authorization letter and an ongoing-certification phase. That is a government registry record rather than a badge on a vendor site.
Illumio documents its own vulnerabilities rather than only its certifications. Its March 2025 advisory names affected and fixed versions for a Ruby SAML authentication bypass in the policy compute engine, tells SaaS customers no action is required, and offers disabling SAML or restricting source IP addresses as interim mitigations. The trust center records a severe impact level with a 24-hour recovery time objective and a 24-hour recovery point objective. [s6, s17, s9, s16]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| Akamai | competes with | Forrester's microsegmentation evaluations rank Akamai Guardicore and Illumio against each other in the same category. | N/AWe scored these companies at different scopes, so the totals measure different things. |
| Cisco | competes with | Andrew Rubin told SDxCentral that Cisco has competed with Illumio since it came to market and sits beside it in almost every customer environment. | N/AWe scored these companies at different scopes, so the totals measure different things. |
| Broadcom | adjacent | Forrester's 2024 blog names Broadcom as delivering microsegmentation for virtualized environments from its VMware acquisition. | |
| Hewlett Packard Enterprise | adjacent | Forrester's 2024 blog names Hewlett Packard Enterprise as providing network-based microsegmentation from its Aruba acquisition. |
Add analyzed competitors to compare them side by side with Illumio.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
reinforce or reposition
Illumio has two assets a rival would have to work for. Its enforcement agent runs inside the operating system on servers and endpoints. Its buyers are banks, airlines and insurers, and its government cloud has carried a FedRAMP authorization on the federal marketplace since August 2024. The reviewed sources do not establish that Illumio retains or pools telemetry across customers, and no patent or licensed corpus appears in them. They never price an exit either, describing how long a rollout takes and never what leaving costs. Illumio is strongest where procurement and deployment depth slow a replacement.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | Illumio delivers software that the customer's own team configures and runs, sold per workload on a contract a buyer can size from the AWS Marketplace listing. The reviewed sources describe cloud onboarding, provider permissions and policy modelling the buyer performs, and Illumio's advisories tell customers to upgrade the policy compute engine and to restrict source IP addresses themselves. Outcomes stay with the customer's team, which is the software-product level. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | The mechanism is documented and the exit is not sized. Illumio's agent enforces policy inline on the host through the Windows Filtering Platform and iptables, and it expresses policy as workload labels rather than as addresses. Whether that policy can move to a replacement is not addressed in the cited pages. SecurityWeek reported that a large enterprise rollout can take three months, which measures adoption rather than departure. The cited record does not state what leaving would cost in duration, parties or complexity, so the migration stays unsized. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 2/3 | Illumio Government Cloud carries a FedRAMP authorization the federal marketplace lists as certified since August 21, 2024, at Class C, the Moderate level, on the agency path, and the trust center adds Common Criteria and FIPS 140-2 alongside ISO/IEC 27001:2022 and SOC 2 Type 2. Replacing Illumio inside a federal agency needs a substitute that has cleared the same regulator-mediated validation, which takes time and agency sponsorship while staying feasible for a funded competitor. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | The engineering is algorithmic and real-time rather than forms and dashboards. Illumio programs the Windows Filtering Platform and iptables from a user-space agent, keeps policy live through agent restarts and reboots, and builds a traffic graph from east-west flows across AWS, Azure, GCP and on-premises environments. Forrester credits the company with adding layer 7 support and features around incident response. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 | The evidenced buyers are regulated enterprises and government. TechCrunch reported more than 10% of Fortune 100 companies using Illumio and named Morgan Stanley, BNP Paribas and Salesforce, the trust center lists Oracle and Alaska Airlines among organizations that have reviewed the company, and the FedRAMP Marketplace records an agency-sponsored authorization for the government cloud. Customer stories cover an insurer, an airline and a healthcare provider working toward HIPAA compliance. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 2/3 | Illumio is a platform with application features rather than infrastructure other software depends on to run. One policy engine covers cloud, endpoint and data-center workloads, a second product reads traffic across the same estate, and both reach buyers through cloud marketplaces and provider integrations. Removing Illumio changes which connections a network allows rather than stopping the applications themselves. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 1/3 | The reviewed sources evidence no asset Illumio retains. Illumio builds its traffic graph and its risk scores from each customer's own flows, and the cited pages do not establish that it retains anything derived from them, while the risky-ports reference and its MITRE ATT&CK tactics page are published in the documentation. No patent, licensed corpus or cross-customer data set appears in the cited pages, so what a funded rival would have to rebuild is the software. |
Illumio sells to large regulated enterprises and to government. TechCrunch reported in 2021 that Illumio said more than 10% of Fortune 100 companies used its technology, naming Morgan Stanley, BNP Paribas and Salesforce, and the trust center lists Oracle, Morgan Stanley, Cathay Pacific, ServiceNow, Alaska Airlines and eBay among organizations that have reviewed the company. The FedRAMP Marketplace records an agency-sponsored authorization for Illumio Government Cloud, which makes the federal segment concrete rather than aspirational.
The site names eight industries, and the published price argues with one of them. Its navigation lists energy and utilities, financial services, government, healthcare, manufacturing, retail, telecoms and small and midsize businesses. The AWS Marketplace entry sells a 12-month contract at $109,000 for 250 secured workloads, so a small business reaching that listing would meet a commitment sized for a much larger estate.
Illumio has said where it wanted to grow, and the statement is four years old. SDxCentral reported in 2022 that the company planned to strengthen its go-to-market approach and push products further into the mid-market, managed service providers and federal government. The reviewed sources carry no later statement of segment strategy and no measure of how far that push went, beyond the federal authorization that arrived in 2024.
Illumio Segmentation programs the host firewall rather than the network. The product page describes enforcement through the Windows Filtering Platform on Windows and iptables on Linux, an agent that runs in user space so a rollout needs no kernel patch or reboot, and a tamper-proof agent so a compromised workload cannot switch its own policy off. Illumio builds policy from workload labels rather than IP addresses, which lets one rule follow a workload from a bare-metal rack to AWS or Azure, and it maps traffic across physical servers, virtual machines, IT and OT systems and containers without changes to a customer's firewall setup.
The AI framing rests on a traffic graph. Illumio describes Illumio Insights as reading east-west flows across hybrid and multi-cloud environments, scoring lateral-movement risk against compliance mandates through a feature it calls Network Posture, and producing an AI-guided remediation plan with one-click containment. The company also markets an assistant it calls Insights Agent, which tailors alerts and next steps to a user's role.
Illumio's deployment claim has no outside test in the reviewed sources. The company says deployment is agentless and push-button across millions of workloads, and no independent evaluation of that claim appears. Illumio also describes the graph as AI-powered without naming a model, a training corpus, or any data it keeps once a customer leaves, so the reviewed sources establish no data asset behind the AI.
Illumio sells direct into large accounts and lists on cloud marketplaces. Its product pages route a buyer to a demo request, and the Illumio Insights page links to both a Microsoft Marketplace and an AWS Marketplace listing. The AWS listing publishes contract prices, so a buyer can size a purchase before speaking to anyone.
Channel and alliance motion appears in the vendor's pages and in independent reporting. SecurityWeek reported in 2020 that a customer could obtain Illumio's endpoint agent from a CrowdStrike Falcon provider and integrate it into Falcon. Illumio runs partner programs for managed service providers and technology alliance partners, and SDxCentral reported in 2022 that the company had hired Jennifer Johnson as chief marketing officer after her time at Amplitude and Tenable.
A free trial is the low-friction way in. The Illumio Insights page offers workload visibility and traffic intelligence on trial, and the homepage repeats the offer. Nothing in the reviewed sources shows how many trials become contracts, so the trial's contribution to the sales motion stays unmeasured.
Illumio prices per workload. Its documentation states that each standalone license is measured by the number of Illumio Workloads across cloud, data center and user endpoint environments, calculated from a resource count and a conversion ratio for each resource type.
Two prices are published rather than negotiated in private. The AWS Marketplace listing sells a 12-month contract at $109,000 per 250 secured workloads including the platform, and $38,400 per 100 public cloud workloads, with custom pricing options for buyers who want a private offer. Pricing runs on the duration and terms of the contract, entitling the buyer to a stated quantity for that period.
The conversion ratios show what Illumio treats as a unit of protection. A cloud virtual machine, a database or a standard server operating system each counts as one workload, a container cluster host and a legacy operating system each count as two, and five user endpoints count as one. Each cloud workload includes 50MB per day of data processing, which ties the telemetry allowance to the workload count rather than billing it separately.
Illumio ships in two shapes. The policy compute engine runs either as a hosted service or on a customer's own systems, per the March 2025 advisory, and Illumio Insights onboards cloud accounts through provider permissions rather than agents. The documentation covers AWS, Azure and GCP onboarding, including identity and access roles for AWS and a Terraform path for Azure.
Two accounts of rollout time stand six years apart. SecurityWeek reported in June 2020 that Andrew Rubin put a large-enterprise deployment at up to three months with benefits starting within weeks, and that every existing connection between endpoints had to be discovered first, followed by a largely manual decision on whether each one was valid. Illumio's current product page describes the map as automatic, says the product generates the recommended policy from it, and puts the process at days rather than months. Draft mode sits between mapping and enforcement, showing what a rule would block before anyone turns it on.
Patch operations are documented and customer-facing. The March 2025 advisory names affected and fixed versions of the policy compute engine, tells hosted customers no action is required because those clusters were already patched, and offers disabling SAML or restricting source IP addresses to customers who cannot upgrade at once. Illumio states the fix ships in a normal code release taking the same time as any upgrade.
The trust center is populated rather than decorative. The SafeBase-hosted portal at trust.illumio.com carries six compliance badges and, behind an access request, three reports, and it also names Oracle, Morgan Stanley, Cathay Pacific, ServiceNow, Alaska Airlines and eBay as organizations that have reviewed the company.
One credential is verifiable without Illumio's help. The FedRAMP Marketplace lists Illumio Government Cloud as FedRAMP Certified as of August 21, 2024, at Class C, the Moderate level, on the agency path, with one authorization letter and an ongoing-certification phase. The marketplace defines that phase as steady-state continuous monitoring and reporting, so the listing tracks the authorization after the grant rather than only recording it.
Illumio publishes its own vulnerabilities alongside its certificates. The National Vulnerability Database carries CVE-2023-5183, an unsafe JSON deserialization flaw in the policy compute engine that lets an authenticated attacker run code, which NVD analysts scored 8.8. Illumio's March 2025 advisory covers a Ruby SAML authentication bypass in the same component and states that only the policy compute engine is affected. Separately, the trust center publishes a risk profile with a severe impact level and 24-hour recovery time and recovery point objectives.
One policy engine covers the estate and a second product reads it. Illumio Segmentation maps and enforces across physical servers, virtual machines, IT and OT systems and containers without changes to a customer's firewall setup, and Illumio Insights reads the same east-west traffic for threats and scores lateral-movement risk against compliance mandates.
Integrations run to the cloud providers and to network telemetry. The documentation covers AWS, Azure and GCP onboarding with per-provider permissions and flow-log access, a Terraform option for Azure, and a documented Cisco NetFlow and sFlow integration.
Distribution partners extend the reach. Illumio lists on Microsoft Marketplace and AWS Marketplace, runs partner programs for managed service providers and technology alliance partners, and SecurityWeek reported a 2020 CrowdStrike arrangement under which a customer could obtain the endpoint agent from a Falcon provider. CrowdStrike is the one alliance the reviewed sources describe. The homepage also headlines a collaboration with Microsoft without saying what it covers, so the breadth of that ecosystem stays undocumented.
Andrew Rubin and PJ Kirner founded Illumio in 2013, Rubin signed the company's 2021 Form D as chief executive and still holds the role, and the bench beneath him was built at VMware, Palo Alto Networks, Symantec and Nimble Storage.
Two funding totals appear. Illumio's leadership page states that the company has raised $582.5 million to date from Andreessen Horowitz, Accel, General Catalyst, 8VC, Thoma Bravo, Franklin Templeton, DCVC, Blue Owl Capital, Hamilton Lane and J.P. Morgan Asset Management. SecurityWeek reported on June 24, 2021 that the $225 million round led by Thoma Bravo took the total past $550 million. No outside publication in the reviewed sources puts a later figure on it, and the company's larger total appears only on its own page.
Directors bring institutional weight of their own. The board pairs Steve Herrod, formerly chief technology officer of VMware, and John Hinshaw, formerly chief operating officer of HSBC, with George Tenet, the 18th Director of the Central Intelligence Agency.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | https://www.illumio.com/company/about-illumio | official | 2026-09-04 |
| f2 | https://www.securityweek.com/micro-segmentation-endpoints-stops-lateral-movement-after-initial-compromise/ | press | 2026-09-04 |
| f3 | https://www.sec.gov/Archives/edgar/data/1567658/000156765821000001/primary_doc.xml | regulatory | 2026-09-04 |
| f4 | https://www.securityweek.com/illumio-raises-225-million-275-billion-valuation/ | press | 2026-09-04 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.