Kubernetes
Auto Added by WPeMatico
Mirantis launches cloud-native data center-as-a-service software
Mirantis has been around the block, starting way back as an OpenStack startup, but a few years ago the company began to embrace cloud-native development technologies like containers, microservices and Kubernetes. Today, it announced Mirantis Flow, a fully managed open source set of services designed to help companies manage a cloud-native data center environment, whether your infrastructure lives on-prem or in a public cloud.
“We’re about delivering to customers an open source-based cloud-to-cloud experience in the data center, on the edge, and interoperable with public clouds,” Adrian Ionel, CEO and co-founder at Mirantis explained.
He points out that the biggest companies in the world, the hyperscalers like Facebook, Netflix and Apple, have all figured out how to manage in a hybrid cloud-native world, but most companies lack the resources of these large organizations. Mirantis Flow is aimed at putting these same types of capabilities that the big companies have inside these more modest organizations.
While the large infrastructure cloud vendors like Amazon, Microsoft and Google have been designed to help with this very problem, Ionel says that these tend to be less open and more proprietary. That can lead to lock-in, which today’s large organizations are looking desperately to avoid.
“[The large infrastructure vendors] will lock you into their stack and their APIs. They’re not based on open source standards or technology, so you are locked in your single source, and most large enterprises today are pursuing a multi-cloud strategy. They want infrastructure flexibility,” he said. He added, “The idea here is to provide a completely open and flexible zero lock-in alternative to the [big infrastructure providers, but with the] same cloud experience and same pace of innovation.”
They do this by putting together a stack of open source solutions in a single service. “We provide virtualization on top as part of the same fabric. We also provide software-defined networking, software-defined storage and CI/CD technology with DevOps as a service on top of it, which enables companies to automate the entire software development pipeline,” he said.
As the company describes the service in a blog post published today, it includes “Mirantis Container Cloud, Mirantis OpenStack and Mirantis Kubernetes Engine, all workloads are available for migration to cloud native infrastructure, whether they are traditional virtual machine workloads or containerized workloads.”
For companies worried about migrating their VMware virtual machines to this solution, Ionel says they have been able to move these VMs to the Mirantis solution in early customers. “This is a very, very simple conversion of the virtual machine from VMware standard to an open standard, and there is no reason why any application and any workload should not run on this infrastructure — and we’ve seen it over and over again in many many customers. So we don’t see any bottlenecks whatsoever for people to move right away,” he said.
It’s important to note that this solution does not include hardware. It’s about bringing your own hardware infrastructure, either physical or as a service, or using a Mirantis partner like Equinix. The service is available now for $15,000 per month or $180,000 annually, which includes: 1,000 core/vCPU licenses for access to all products in the Mirantis software suite plus support for 20 virtual machine (VM) migrations or application onboarding and unlimited 24×7 support. The company does not charge any additional fees for control plane and management software licenses.
Powered by WPeMatico
Cisco beefing up app monitoring portfolio with acquisition of Epsagon for $500M
Cisco announced on Friday that it’s acquiring Israeli applications-monitoring startup Epsagon at a price pegged at $500 million. The purchase gives Cisco a more modern microservices-focused component for its growing applications-monitoring portfolio.
The Israeli business publication Globes reported it had gotten confirmation from Cisco that the deal was for $500 million, but Cisco would not confirm that price with TechCrunch.
The acquisition comes on top of a couple of other high-profile app-monitoring deals, including AppDynamics, which the company bought in 2018 for $3.7 billion, and ThousandEyes, which it nabbed last year for $1 billion.
With Epsagon, the company is getting a way to monitor more modern applications built with containers and Kubernetes. Epsagon’s value proposition is a solution built from the ground up to monitor these kinds of workloads, giving users tracing and metrics, something that’s not always easy to do given the ephemeral nature of containers.
As Cisco’s Liz Centoni wrote in a blog post announcing the deal, Epsagon adds to the company’s concept of a full-stack offering in their applications-monitoring portfolio. Instead of having a bunch of different applications monitoring tools for different tasks, the company envisions one that works together.
“Cisco’s approach to full-stack observability gives our customers the ability to move beyond just monitoring to a paradigm that delivers shared context across teams and enables our customers to deliver exceptional digital experiences, optimize for cost, security and performance and maximize digital business revenue,” Centoni wrote.
That experience point is particularly important because when an application isn’t working, it isn’t happening in a vacuum. It has a cascading impact across the company, possibly affecting the core business itself and certainly causing customer distress, which could put pressure on customer service to field complaints, and the site reliability team to fix it. In the worst case, it could result in customer loss and an injured reputation.
If the application-monitoring system can act as an early warning system, it could help prevent the site or application from going down in the first place, and when it does go down, help track the root cause to get it up and running more quickly.
The challenge here for Cisco is incorporating Epsagon into the existing components of the application-monitoring portfolio and delivering that unified monitoring experience without making it feel like a Frankenstein’s monster of a solution globbed together from the various pieces.
Epsagon launched in 2018 and has raised $30 million. According to a report in the Israeli publication, Calcalist, the company was on the verge of a big Series B round with a valuation in the range of $200 million when it accepted this offer. It certainly seems to have given its early investors a good return. The deal is expected to close later this year.
Powered by WPeMatico
Extra Crunch roundup: 3 lies VCs tell, betting big on Kubernetes, NYC’s enterprise boom
Although older adults are one of the fastest-growing demographics, they’re quite underserved when it comes to consumer tech.
The global population of people older than 65 will reach 1.5 billion by 2050, and members of this cohort — who are leading longer, active lives — have plenty of money to spend.
Still, most startups persist in releasing products aimed at serving younger users, says Lawrence Kosick, co-founder of GetSetUp, an edtech company that targets 50+ learners.
“If you can provide a valuable, scalable service for the older adult market, there’s a lot of opportunity to drive growth through partnerships,” he notes.
Full Extra Crunch articles are only available to members.
Use discount code ECFriday to save 20% off a one- or two-year subscription.
Image Credits: Sukhinder Singh Cassidy
On Thursday, August 19, Managing Editor Danny Crichton will interview Sukhinder Singh Cassidy, author of “Choose Possibility,” on Twitter Spaces at 2 p.m. PDT/5 p.m. EDT/9 p.m. UTC.
Singh Cassidy, founder of premium talent marketplace theBoardlist, will discuss making the leap into entrepreneurship after leaving Google, her time as CEO-in-Residence at venture capital firm Accel Partners and the framework she’s developed for taking career risks.
They’ll take questions from the audience, so please add a reminder to your calendar to join the conversation.
Thanks very much for reading Extra Crunch this week! Have a great weekend.
Walter Thompson
Senior Editor, TechCrunch
@yourprotagonist
Dear Sophie: Can I hire an engineer whose green card is being sponsored by another company?
Image Credits: Bryce Durbin/TechCrunch
Dear Sophie,
I want to extend an offer to an engineer who has been working in the U.S. on an H-1B for almost five years. Her current employer is sponsoring her for an EB-2 green card, and our startup wants to hire her as a senior engineer.
What happens to her green card process? Can we take it over?
— Recruiting in Richmond
3 lies VCs tell ourselves about startup valuations
Image Credits: Dmitrii_Guzhanin (opens in a new window) / Getty Images
In a candid guest post, Scott Lenet, president of Touchdown Ventures, writes about the cognitive dissonance currently plaguing venture capital.
Yes, there’s an incredible amount of competition for deals, but there’s also a path to bringing soaring startup valuations back to earth.
For example, early investors have an inherent conflict of interest with later participants and many VCs are thirsty “logo hunters” who just want bragging rights.
At some point, “venture capitalists need to stop engaging in self-delusion about why a valuation that is too high might be OK,” writes Lenet.
‘The tortoise and the hare’ story is playing out right now in VC
Image Credits: Getty Images under a GK Hart/Vikki Hart (opens in a new window) license.
Aesop’s fable about the determined tortoise who defeated an arrogant hare has many interpretations, e.g., the value of perseverance, the virtue of taking on bullies, how an outsized ego can undermine natural talent.
In the case of venture capital, the allegory is relevant because a slow, steady and more personal approach generates better outcomes, says Marc Schröder, managing partner of MGV.
“We simply must take the time to get to know founders.”
What’s driving the global surge in retail media spending?
Image Credits: Getty Images under a jayk7 (opens in a new window) license.
As the pandemic changed consumer behavior and regulations began to reshape digital marketing tools, advertisers are turning to retail media.
Using the reams of data collected at the individual and aggregate level, retail media produce high-margin revenue streams. “And like most things, there is a bad, a good and a much better way of doing things,” advises Cynthia Luo, head of marketing at e-commerce marketing stack Epsilo.
New York City’s enterprise tech startups could be heading for a superheated exit wave
Image Credits: Nigel Sussman (opens in a new window)
“We lied when we said that The Exchange was done covering 2021 venture capital performance,” Anna Heim and Alex Wilhelm admit.
Yesterday, they reviewed a detailed report from NYC-based VC group Work-Bench on the city’s enterprise tech startups.
“New York City’s enterprise footprint is now large enough that it must be considered a leading market for the startup varietal,” Anna and Alex conclude, “making its results a bellwether to some degree.”
“And if New York City is laying the groundwork for a huge wave of unicorn exits in the coming four to eight quarters, we should expect to see something similar in other enterprise markets around the world.”
Disaster recovery can be an effective way to ease into the cloud
Image Credits: PM Images (opens in a new window) / Getty Images
Given the rapid pace of digital transformation, nearly every business will eventually migrate some — or most — aspects of their operations to the cloud.
Before making the wholesale shift to digital, companies can start getting comfortable by using disaster recovery as a service (DRaaS). Even a partially managed DRaaS can make an organization more resilient and lighten the load for its IT team.
Plus, it’s also a savvy way for tech leaders to get shot-callers inside their companies to get on board the cloud bandwagon.
Regulations can define the best places to build and invest
Image Credits: PeopleImages (opens in a new window) / Getty Images
“The decisions of government, the broader legal system and its combined level of scrutiny toward a particular subject” can affect market timing and the durability of an idea, Noorjit Sidhu, an early-stage investor at Plug & Play Ventures, writes in a guest column.
There are three areas currently facing regulatory scrutiny that have the potential to “provide outsized returns,” Sidhu writes: taxes, telemedicine and climate.
VCs unfazed by Chinese regulatory shakeups (so far)
Image Credits: Nigel Sussman (opens in a new window)
“China’s technology scene has been in the news for all the wrong reasons in recent months,” Anna Heim and Alex Wilhelm write about the Chinese government’s crackdown on a host of technology companies.
“The result of the government fusillade against some of the best-known companies in China was falling share prices,” they write.
But has it affected the venture capital market? SoftBank this week said it would pause investments in China, but the numbers through Q2 indicate China is steadier than Alex and Anna expected.
Perform a quality of earnings analysis to make the most of M&A
Image Credits: Westend61 (opens in a new window) / Getty Images under a license.
If you’re a startup founder, odds are, at some point, you’ll raise a Series A (and B and C and D, hopefully), perform a strategic acquisition, and maybe even sell your company.
When those things occur, you’ll need to know how to do a quality of earnings (QofE) to maximize value, Pierre-Alexandre Heurtebize, investment and M&A director at HoriZen Capital, writes in a guest column.
He walks through a framework for thinking and organizing a QofE for “every M&A and private equity transition you may be part of.”
VCs are betting big on Kubernetes: Here are 5 reasons why
Image Credits: Getty Images under a akinbostanci (opens in a new window) license.
“What was once solely an internal project at Google has since been open-sourced and has become one of the most talked about technologies in software development and operations,” Ben Ofiri, the co-founder and CEO of the Kubernetes troubleshooting platform Komodor, writes of Kubernetes, which he calls “the new Linux.”
“This technology isn’t going anywhere, so any platform or tooling that helps make it more secure, simple to use and easy to troubleshoot will be well appreciated by the software development community.”
Powered by WPeMatico
VCs are betting big on Kubernetes: Here are 5 reasons why
I worked at Google for six years. Internally, you have no choice — you must use Kubernetes if you are deploying microservices and containers (it’s actually not called Kubernetes inside of Google; it’s called Borg). But what was once solely an internal project at Google has since been open-sourced and has become one of the most talked about technologies in software development and operations.
For good reason. One person with a laptop can now accomplish what used to take a large team of engineers. At times, Kubernetes can feel like a superpower, but with all of the benefits of scalability and agility comes immense complexity. The truth is, very few software developers truly understand how Kubernetes works under the hood.
I like to use the analogy of a watch. From the user’s perspective, it’s very straightforward until it breaks. To actually fix a broken watch requires expertise most people simply do not have — and I promise you, Kubernetes is much more complex than your watch.
How are most teams solving this problem? The truth is, many of them aren’t. They often adopt Kubernetes as part of their digital transformation only to find out it’s much more complex than they expected. Then they have to hire more engineers and experts to manage it, which in a way defeats its purpose.
Where you see containers, you see Kubernetes to help with orchestration. According to Datadog’s most recent report about container adoption, nearly 90% of all containers are orchestrated.
All of this means there is a great opportunity for DevOps startups to come in and address the different pain points within the Kubernetes ecosystem. This technology isn’t going anywhere, so any platform or tooling that helps make it more secure, simple to use and easy to troubleshoot will be well appreciated by the software development community.
In that sense, there’s never been a better time for VCs to invest in this ecosystem. It’s my belief that Kubernetes is becoming the new Linux: 96.4% of the top million web servers’ operating systems are Linux. Similarly, Kubernetes is trending to become the de facto operating system for modern, cloud-native applications. It is already the most popular open-source project within the Cloud Native Computing Foundation (CNCF), with 91% of respondents using it — a steady increase from 78% in 2019 and 58% in 2018.
While the technology is proven and adoption is skyrocketing, there are still some fundamental challenges that will undoubtedly be solved by third-party solutions. Let’s go deeper and look at five reasons why we’ll see a surge of startups in this space.
Containers are the go-to method for building modern apps
Docker revolutionized how developers build and ship applications. Container technology has made it easier to move applications and workloads between clouds. It also provides as much resource isolation as a traditional hypervisor, but with considerable opportunities to improve agility, efficiency and speed.
Powered by WPeMatico
Platform as a service startup Porter aims to become go-to for deploying, managing cloud-based apps
By the time Porter co-founders Trevor Shim, Alexander Belanger and Justin Rhee decided to build a company around DevOps, the pair were well versed in doing remote development on Kubernetes. And like other users, they were consistently getting burnt by the technology.
They realized that for all of the benefits, the technology was there, but users were having to manage the complexity of hosting solutions as well as incurring the costs associated with a big DevOps team, Rhee told TechCrunch.
They decided to build a solution externally and went through Y Combinator’s Summer 2020 batch, where they found other startup companies trying to do the same.
Today, Porter announced $1.5 million in seed funding from Venrock, Translink Capital, Soma Capital and several angel investors. Its goal is to build a platform as a service that any team can use to manage applications in its own cloud, essentially delivering the full flexibility of Kubernetes through a Heroku-like experience.
Why Heroku? It is the hosting platform that developers are used to, and not just small companies, but also later-stage companies. When they want to move to Amazon Web Services, Google Cloud or DigitalOcean, Porter will be that bridge, Shim said.
However, while Heroku is still popular, the pair said companies are thinking the platform is getting outdated because it is standing still technology-wise. Each year, companies move on from the platform due to technical limitations and cost, Rhee said.
A big part of the bet Porter is taking is not charging users for hosting, and its cost is a pure SaaS product, he said. They aren’t looking to be resellers, so companies can use their own cloud, but Porter will provide the automation and users can pay with their AWS and GCP credits, which gives them flexibility.
A common pattern is a move into Kubernetes, but “the zinger we talk about” is if Heroku was built in 2021, it would have been built on Kubernetes, Shim added.
“So we see ourselves as a successor to Heroku,” he said.
To be that bridge, the company will use the new funding to increase its engineering bandwidth with the goal of “becoming the de facto standard for all startups.” Shim said.
Porter’s platform went live in February, and in six months became the sixth-fastest growing open-source platform download on GitHub, said Ethan Batraski, partner at Venrock. He met the company through YC and was “super impressed with Rhee’s and Shim’s vision.
“Heroku has 100,000 developers, but I believe it has stagnated,” Batraski added. “Porter already has 100 startups on its platform. The growth they’ve seen — four or five times — is what you want to see at this stage.”
His firm has long focused on data infrastructure and is seeing the stack get more complex, saying “at the same time, more developers are wanting to build out an app over a week, and scale it to millions of users, but that takes people resources. With Kubernetes it can turn everyone into an expert developer without them knowing.”
Powered by WPeMatico
Styra, the startup behind Open Policy Agent, nabs $40M to expand its cloud-native authorization tools
As cloud-native apps continue to become increasingly central to how organizations operate, a startup founded by the creators of a popular open-source tool to manage authorization for cloud-native application environments is announcing some funding to expand its efforts at commercializing the opportunity.
Styra, the startup behind Open Policy Agent, has picked up $40 million in a Series B round of funding led by Battery Ventures. Also participating are previous backers A. Capital, Unusual Ventures and Accel; and new backers CapitalOne Ventures, Citi Ventures and Cisco Investments. Styra has disclosed CapitalOne is also one of its customers, along with e-commerce site Zalando and the European Patent Office.
Styra is sitting on the classic opportunity of open source technology: scale and demand.
OPA — which can be used across Kubernetes, containerized and other environments — now has racked up some 75 million downloads and is adding some 1 million downloads weekly, with Netflix, Capital One, Atlassian and Pinterest among those that are using OPA for internal authorization purposes. The fact that OPA is open source is also important:
“Developers are at the top of the food chain right now,” CEO Bill Mann said in an interview, “They choose which technology on which to build the framework, and they want what satisfies their requirements, and that is open source. It’s a foundational change: if it isn’t open source it won’t pass the test.”
But while some of those adopting OPA have hefty engineering teams of their own to customize how OPA is used, the sheer number of downloads (and potential active users stemming from that) speak to the opportunity for a company to build tools to help manage that and customize it for specific use cases in cases where those wanting to use OPA may lack the resources (or appetite) to build and scale custom implementations themselves.
As with many of the enterprise startups getting funded at the moment, Styra has proven itself in particular over the last year, with the switch to remote work, workloads being managed across a number of environments, and the ever-persistent need for better security around what people can and should not be using. Authorization is a particularly acute issue when considering the many access points that need to be monitored: as networks continue to grow across multiple hubs and applications, having a single authorization tool for the whole stack becomes even more important.
Styra said that some of the funding will be used to continue evolving its product, specifically by creating better and more efficient ways to apply authorization policies by way of code; and by bringing in more partners to expand the scope of what can be covered by its technology.
“We are extremely impressed with the Styra team and the progress they’ve made in this dynamic market to date,” said Dharmesh Thakker, a general partner at Battery Ventures. “Everyone who is moving to cloud, and adopting containerized applications, needs Styra for authorization—and in the light of today’s new, remote-first work environment, every enterprise is now moving to the cloud.” Thakker is joining the board with this round.
Powered by WPeMatico
Google’s Anthos multicloud platform gets improved logging, Windows container support and more
Google today announced a sizable update to its Anthos multicloud platform that lets you build, deploy and manage containerized applications anywhere, including on Amazon’s AWS and (in preview) on Microsoft Azure.
Version 1.7 includes new features like improved metrics and logging for Anthos on AWS, a new Connect gateway to interact with any cluster right from Google Cloud and a preview of Google’s managed control plane for Anthos Service Mesh. Other new features include Windows container support for environments that use VMware’s vSphere platform and new tools for developers to make it easier for them to deploy their applications to any Anthos cluster.
Today’s update comes almost exactly two years after Google CEO Sundar Pichai originally announced Anthos at its Cloud Next event in 2019 (before that, Google called this project the “Google Cloud Services Platform,” which launched three years ago). Hybrid and multicloud, it’s fair to say, takes a key role in the Google Cloud roadmap — and maybe more so for Google than for any of its competitors. Recently, Google brought on industry veteran Jeff Reed to become the VP of Product Management in charge of Anthos.
Reed told me that he believes that there are a lot of factors right now that are putting Anthos in a good position. “The wind is at our back. We bet on Kubernetes, bet on containers — those were good decisions,” he said. Increasingly, customers are also now scaling out their use of Kubernetes and have to figure out how to best scale out their clusters and deploy them in different environments — and to do so, they need a consistent platform across these environments. He also noted that when it comes to bringing on new Anthos customers, it’s really those factors that determine whether a company will look into Anthos or not.
He acknowledged that there are other players in this market, but he argues that Google Cloud’s take on this is also quite different. “I think we’re pretty unique in the sense that we’re from the cloud, cloud-native is our core approach,” he said. “A lot of what we talk about in [Anthos] 1.7 is about how we leverage the power of the cloud and use what we call “an anchor in the cloud” to make your life much easier. We’re more like a cloud vendor there, but because we support on-prem, we see some of those other folks.” Those other folks being IBM/Red Hat’s OpenShift and VMware’s Tanzu, for example.
The addition of support for Windows containers in vSphere environments also points to the fact that a lot of Anthos customers are classical enterprises that are trying to modernize their infrastructure, yet still rely on a lot of legacy applications that they are now trying to bring to the cloud.
Looking ahead, one thing we’ll likely see is more integrations with a wider range of Google Cloud products into Anthos. And indeed, as Reed noted, inside of Google Cloud, more teams are now building their products on top of Anthos themselves. In turn, that then makes it easier to bring those services to an Anthos-managed environment anywhere. One of the first of these internal services that run on top of Anthos is Apigee. “Your Apigee deployment essentially has Anthos underneath the covers. So Apigee gets all the benefits of a container environment, scalability and all those pieces — and we’ve made it really simple for that whole environment to run kind of as a stack,” he said.
I guess we can expect to hear more about this in the near future — or at Google Cloud Next 2021.
Powered by WPeMatico
Esri brings its flagship ArcGIS platform to Kubernetes
Esri, the geographic information system (GIS), mapping and spatial analytics company, is hosting its (virtual) developer summit today. Unsurprisingly, it is making a couple of major announcements at the event that range from a new design system and improved JavaScript APIs to support for running ArcGIS Enterprise in containers on Kubernetes.
The Kubernetes project was a major undertaking for the company, Esri Product Managers Trevor Seaton and Philip Heede told me. Traditionally, like so many similar products, ArcGIS was architected to be installed on physical boxes, virtual machines or cloud-hosted VMs. And while it doesn’t really matter to end-users where the software runs, containerizing the application means that it is far easier for businesses to scale their systems up or down as needed.
Esri ArcGIS Enterprise on Kubernetes deployment. Image Credits: Esri
“We have a lot of customers — especially some of the larger customers — that run very complex questions,” Seaton explained. “And sometimes it’s unpredictable. They might be responding to seasonal events or business events or economic events, and they need to understand not only what’s going on in the world, but also respond to their many users from outside the organization coming in and asking questions of the systems that they put in place using ArcGIS. And that unpredictable demand is one of the key benefits of Kubernetes.”
Deploying Esri ArcGIS Enterprise on Kubernetes. Image Credits: Esri
The team could have chosen to go the easy route and put a wrapper around its existing tools to containerize them and call it a day, but as Seaton noted, Esri used this opportunity to re-architect its tools and break it down into microservices.
“It’s taken us a while because we took three or four big applications that together make up [ArcGIS] Enterprise,” he said. “And we broke those apart into a much larger set of microservices. That allows us to containerize specific services and add a lot of high availability and resilience to the system without adding a lot of complexity for the administrators — in fact, we’re reducing the complexity as we do that and all of that gets installed in one single deployment script.”
While Kubernetes simplifies a lot of the management experience, a lot of companies that use ArcGIS aren’t yet familiar with it. And as Seaton and Heede noted, the company isn’t forcing anyone onto this platform. It will continue to support Windows and Linux just like before. Heede also stressed that it’s still unusual — especially in this industry — to see a complex, fully integrated system like ArcGIS being delivered in the form of microservices and multiple containers that its customers then run on their own infrastructure.
Image Credits: Esri
In addition to the Kubernetes announcement, Esri also today announced new JavaScript APIs that make it easier for developers to create applications that bring together Esri’s server-side technology and the scalability of doing much of the analysis on the client-side. Back in the day, Esri would support tools like Microsoft’s Silverlight and Adobe/Apache Flex for building rich web-based applications. “Now, we’re really focusing on a single web development technology and the toolset around that,” Esri product manager Julie Powell told me.
A bit later this month, Esri also plans to launch its new design system to make it easier and faster for developers to create clean and consistent user interfaces. This design system will launch April 22, but the company already provided a bit of a teaser today. As Powell noted, the challenge for Esri is that its design system has to help the company’s partners put their own style and branding on top of the maps and data they get from the ArcGIS ecosystem.
Powered by WPeMatico
Aqua Security raises $135M at a $1B valuation for its cloud native security platform
Aqua Security, a Boston- and Tel Aviv-based security startup that focuses squarely on securing cloud-native services, today announced that it has raised a $135 million Series E funding round at a $1 billion valuation. The round was led by ION Crossover Partners. Existing investors M12 Ventures, Lightspeed Venture Partners, Insight Partners, TLV Partners, Greenspring Associates and Acrew Capital also participated. In total, Aqua Security has now raised $265 million since it was founded in 2015.
The company was one of the earliest to focus on securing container deployments. And while many of its competitors were acquired over the years, Aqua remains independent and is now likely on a path to an IPO. When it launched, the industry focus was still very much on Docker and Docker containers. To the detriment of Docker, that quickly shifted to Kubernetes, which is now the de facto standard. But enterprises are also now looking at serverless and other new technologies on top of this new stack.
“Enterprises that five years ago were experimenting with different types of technologies are now facing a completely different technology stack, a completely different ecosystem and a completely new set of security requirements,” Aqua CEO Dror Davidoff told me. And with these new security requirements came a plethora of startups, all focusing on specific parts of the stack.
Image Credits: Aqua Security
What set Aqua apart, Dror argues, is that it managed to 1) become the best solution for container security and 2) realized that to succeed in the long run, it had to become a platform that would secure the entire cloud-native environment. About two years ago, the company made this switch from a product to a platform, as Davidoff describes it.
“There was a spree of acquisitions by CheckPoint and Palo Alto [Networks] and Trend [Micro],” Davidoff said. “They all started to acquire pieces and tried to build a more complete offering. The big advantage for Aqua was that we had everything natively built on one platform. […] Five years later, everyone is talking about cloud-native security. No one says ‘container security’ or ‘serverless security’ anymore. And Aqua is practically the broadest cloud-native security [platform].”
One interesting aspect of Aqua’s strategy is that it continues to bet on open source, too. Trivy, its open-source vulnerability scanner, is the default scanner for GitLab’s Harbor Registry and the CNCF’s Artifact Hub, for example.
“We are probably the best security open-source player there is because not only do we secure from vulnerable open source, we are also very active in the open-source community,” Davidoff said (with maybe a bit of hyperbole). “We provide tools to the community that are open source. To keep evolving, we have a whole open-source team. It’s part of the philosophy here that we want to be part of the community and it really helps us to understand it better and provide the right tools.”
In 2020, Aqua, which mostly focuses on mid-size and larger companies, doubled the number of paying customers and it now has more than half a dozen customers with an ARR of over $1 million each.
Davidoff tells me the company wasn’t actively looking for new funding. Its last funding round came together only a year ago, after all. But the team decided that it wanted to be able to double down on its current strategy and raise sooner than originally planned. ION had been interested in working with Aqua for a while, Davidoff told me, and while the company received other offers, the team decided to go ahead with ION as the lead investor (with all of Aqua’s existing investors also participating in this round).
“We want to grow from a product perspective, we want to grow from a go-to-market [perspective] and expand our geographical coverage — and we also want to be a little more acquisitive. That’s another direction we’re looking at because now we have the platform that allows us to do that. […] I feel we can take the company to great heights. That’s the plan. The market opportunity allows us to dream big.”
Powered by WPeMatico
Why F5 spent $2.2B on 3 companies to focus on cloud native applications
It’s essential for older companies to recognize changes in the marketplace or face the brutal reality of being left in the dust. F5 is an old-school company that launched back in the 90s, yet has been able to transform a number of times in its history to avoid major disruption. Over the last two years, the company has continued that process of redefining itself, this time using a trio of acquisitions — NGINX, Shape Security and Volterra — totaling $2.2 billion to push in a new direction.
While F5 has been associated with applications management for some time, it recognized that the way companies developed and managed applications was changing in a big way with the shift to Kubernetes, microservices and containerization. At the same time, applications have been increasingly moving to the edge, closer to the user. The company understood that it needed to up its game in these areas if it was going to keep up with customers.
Taken separately, it would be easy to miss that there was a game plan behind the three acquisitions, but together they show a company with a clear opinion of where they want to go next. We spoke to F5 president and CEO François Locoh-Donou to learn why he bought these companies and to figure out the method in his company’s acquisition spree madness.
Looking back, looking forward
F5, which was founded in 1996, has found itself at a number of crossroads in its long history, times where it needed to reassess its position in the market. A few years ago it found itself at one such juncture. The company had successfully navigated the shift from physical appliance to virtual, and from data center to cloud. But it also saw the shift to cloud native on the horizon and it knew it had to be there to survive and thrive long term.
“We moved from just keeping applications performing to actually keeping them performing and secure. Over the years, we have become an application delivery and security company. And that’s really how F5 grew over the last 15 years,” said Locoh-Donou.
Today the company has over 18,000 customers centered in enterprise verticals like financial services, healthcare, government, technology and telecom. He says that the focus of the company has always been on applications and how to deliver and secure them, but as they looked ahead, they wanted to be able to do that in a modern context, and that’s where the acquisitions came into play.
As F5 saw it, applications were becoming central to their customers’ success and their IT departments were expending too many resources connecting applications to the cloud and keeping them secure. So part of the goal for these three acquisitions was to bring a level of automation to this whole process of managing modern applications.
“Our view is you fast forward five or 10 years, we are going to move to a world where applications will become adaptive, which essentially means that we are going to bring automation to the security and delivery and performance of applications, so that a lot of that stuff gets done in a more native and automated way,” Locoh-Donou said.
As part of this shift, the company saw customers increasingly using microservices architecture in their applications. This means instead of delivering a large monolithic application, developers were delivering them in smaller pieces inside containers, making it easier to manage, deploy and update.
At the same time, it saw companies needing a new way to secure these applications as they shifted from data center to cloud to the edge. And finally, that shift to the edge would require a new way to manage applications.
Powered by WPeMatico