Imperva

Imperva is a cybersecurity brand focused on protecting enterprise applications, data, websites, APIs, and digital services from attacks, misuse, and unauthorized access. The company began in 2002 under the name WebCohort, founded by Shlomo Kramer, Amichai Shulman, and Mickey Boodaei. Its initial focus was application and database protection, and the business adopted the Imperva name in 2004. In 2003, it shipped SecureSphere Web Application Database Protection, a product combining web application firewall capabilities with database security functions. Imperva developed from a specialist security-software vendor into a broader application and data security platform. Its application-security portfolio has included web application firewalls, distributed-denial-of-service protection, API security, bot management, account-takeover protection, attack analytics, application delivery, and runtime application self-protection. Its data-security products have included database activity monitoring, data discovery and assessment, data-risk analytics, data masking, and file security. These capabilities are designed for on-premises, cloud, and hybrid environments and are typically sold to organizations needing to protect internet-facing applications and regulated or commercially sensitive information. The company expanded through both internal development and acquisitions. It acquired or incorporated capabilities associated with Incapsula, a cloud application-security provider; Skyfence; Tomium Software’s real-time mainframe security auditing assets; Camouflage, a data-masking business; Prevoty, a runtime application self-protection specialist; Distil Networks, known for bot-management technology; and jSonar, a database-security company. These transactions broadened Imperva’s coverage from traditional network and database controls toward cloud delivery, runtime protection, automated traffic analysis, and modern data-security operations. Imperva became a public company in 2011, listing on the New York Stock Exchange under the symbol IMPV. During the public-company period it underwent several leadership changes, including the appointment of Anthony Bettencourt as chief executive in 2014 and Chris Hylen as president and chief executive in 2017. Imperva also made security research and threat-response contributions, including a free scanner in 2016 intended to identify devices infected with or vulnerable to the Mirai botnet. In 2018, the company reported identifying a Google Chrome vulnerability involving the handling of HTML audio and video tags. Private-equity firm Thoma Bravo acquired Imperva in 2019, taking the company private. The same year, Imperva disclosed a security incident affecting some Incapsula users and reported that sensitive information had been exposed. Chris Hylen left the chief executive role in October 2019, Charles Goodman served as interim chief executive, and Pam Murphy was appointed CEO in January 2020. Imperva later became part of Thales after Thales agreed in 2023 to acquire it from Thoma Bravo for approximately $3.6 billion. The transaction was completed on December 4, 2023. Imperva now operates as a Thales cybersecurity business, while retaining its identity and product focus in application and data security.

Imperva was established in 2002 as WebCohort by Shlomo Kramer, Amichai Shulman, and Mickey Boodaei. Its early objective was to help organizations defend enterprise applications and databases against unauthorized access and web-based attacks. The company shipped its first product in 2003, SecureSphere Web Application Database Protection, and changed its name to Imperva in 2004. The business grew around the intersection of application and data security. Its SecureSphere product family addressed web application firewall and database-protection requirements, while later offerings extended into cloud-based application defense, denial-of-service mitigation, data activity monitoring, data masking, runtime protection, and automated traffic analysis. Imperva’s strategy emphasized layered controls that could be deployed across data centers, public clouds, and hybrid infrastructures. Imperva expanded its capabilities through acquisitions. In 2014 it acquired Incapsula, a cloud application-security company, as well as Skyfence and real-time mainframe security-auditing assets from Tomium Software. In 2017 it sold Skyfence to Forcepoint. Imperva acquired Camouflage, a data-masking company, in 2017; Prevoty, a runtime application self-protection specialist, in 2018; and Distil Networks, a bot-management provider, in 2019. In 2020 it acquired database-security startup jSonar for an undisclosed amount. Imperva went public in 2011 on the New York Stock Exchange under the symbol IMPV. Leadership changed several times during the public-company era. Anthony Bettencourt became CEO in 2014, followed by Chris Hylen as president and CEO in 2017. Bettencourt later resigned as board chairman in 2018. Imperva also conducted security research and public threat-response work, including a 2016 scanner for devices infected with or exposed to the Mirai botnet. In 2018, the company identified a Google Chrome vulnerability related to HTML audio and video tags. In 2019, Thoma Bravo acquired Imperva, ending its period as a listed company. That year Imperva disclosed a security incident affecting some Incapsula users and reported exposure of sensitive information. Hylen departed as CEO in October 2019, Charles Goodman served as interim CEO, and Pam Murphy was named CEO in January 2020. Thales announced an agreement to purchase Imperva in July 2023 for approximately $3.6 billion. The transaction closed on December 4, 2023. Under Thales ownership, Imperva remains an enterprise cybersecurity brand focused on application, API, bot, DDoS, runtime, and data-security technologies.

1. 2023Thales acquisition completed

   Thales completed its approximately $3.6 billion acquisition of Imperva on December 4, 2023.

   Source
2. 2020jSonar acquired

   Imperva acquired database-security startup jSonar for an undisclosed amount.

   Source
3. 2019Thoma Bravo acquisition

   Thoma Bravo acquired Imperva and took the company private.

   Source
4. 2018Prevoty acquired

   Imperva acquired Prevoty to add runtime application self-protection capabilities.

   Source
5. 2017Skyfence sold to Forcepoint

   Imperva divested Skyfence to Forcepoint for $40 million.

   Source
6. 2014Incapsula and other assets acquired

   Imperva acquired Incapsula, Skyfence, and real-time mainframe security-auditing assets from Tomium Software.

   Source
7. 2011Initial public offering

   Imperva began trading on the New York Stock Exchange under the symbol IMPV.

   Source
8. 2004WebCohort renamed Imperva

   The company adopted the Imperva name.

   Source
9. 2003First product shipped

   Imperva shipped SecureSphere Web Application Database Protection, an early web application firewall and database-protection product.

   Source
10. 2002Company founded as WebCohort

    Shlomo Kramer, Amichai Shulman, and Mickey Boodaei founded the company under the WebCohort name.

    Source

Enterprise cybersecurity platform combining application security, API and bot protection, and data-security controls across on-premises, cloud, and hybrid environments.

• Imperva Web Application FirewallApplication security2003

  A web application firewall designed to inspect and block malicious HTTP and HTTPS traffic targeting enterprise web applications. It is part of Imperva’s broader application-security stack and can be deployed to protect applications across on-premises, cloud, and hybrid environments.

• Imperva DDoS ProtectionNetwork and application security

  Distributed-denial-of-service protection intended to maintain the availability of websites, applications, and digital services during volumetric or application-layer attacks.

• Imperva API SecurityApplication security

  Security capabilities for discovering, analyzing, and protecting application programming interfaces, including controls intended to identify abusive or unauthorized API activity.

• Imperva Bot ManagementApplication security2019

  Technology for distinguishing automated traffic from legitimate users and managing malicious bots, scraping, automated abuse, and related account or application threats. Imperva strengthened this area through its 2019 acquisition of Distil Networks.

• Imperva Data SecurityData security

  A set of data-security capabilities covering database activity monitoring, data discovery and assessment, data-risk analytics, data masking, and file security. The offering is intended to help organizations understand how sensitive data is used and reduce exposure across enterprise environments.

• SecureSphere Web Application Database ProtectionApplication and database security2003

  Imperva’s first reported product, shipped in 2003. It combined web application firewall functions with database-protection capabilities and established the company’s original focus on securing applications and the data behind them.

• 2016Mirai device scanner

  Global

  Imperva published a free scanner intended to help organizations identify devices infected with, or vulnerable to, the Mirai botnet.

  Outcome. The tool supported public awareness and defensive checking during the Mirai botnet threat period.

  Source

• 2023Thales acquires ImpervaM&A

  Thales sought to expand its cybersecurity portfolio, while Imperva offered established application and data-security capabilities.

  What changed. Thales agreed to acquire Imperva from Thoma Bravo for approximately $3.6 billion, completing the transaction on December 4, 2023.

  Aftermath. Imperva became part of the Thales Group and remained an active cybersecurity brand.

  Acquisition value. $3.6 billion (Announced July 2023; completed December 4, 2023)

  Source
• 2019Thoma Bravo takes Imperva privateM&A

  Imperva was a listed cybersecurity company expanding its application and data-security portfolio through acquisitions.

  What changed. Thoma Bravo acquired Imperva, ending its public listing.

  Aftermath. Imperva continued as a private-equity-owned cybersecurity business and subsequently expanded through the jSonar acquisition.

  Source
• 2011Public-market listingStrategy

  Imperva had expanded as an enterprise cybersecurity vendor and pursued access to public capital markets.

  What changed. The company listed on the New York Stock Exchange under the ticker IMPV.

  Aftermath. Imperva operated as a public company until its acquisition by Thoma Bravo in 2019.

  Source

• 2019Incapsula security incidentControversy

  Imperva notified customers that it had learned of a security incident affecting some Incapsula users and exposing sensitive information. The disclosure concerned the security of Imperva’s own service environment and became a significant event in the company’s corporate history.

  Source

• 2023Thales agrees to acquire Imperva

  Thales agreed to acquire Imperva from Thoma Bravo for approximately $3.6 billion.

  M&A
  Source
• 2023Thales completes Imperva acquisition

  The acquisition was completed on December 4, 2023, making Imperva part of Thales.

  M&A
  Source
• 2019Thoma Bravo acquires Imperva

  Private-equity firm Thoma Bravo acquired Imperva and took it private.

  M&A
  Source
• 2018Imperva reports a Google Chrome vulnerability

  Imperva identified a Chrome bug that could allow attackers to steal information through HTML tags used for audio and video files.

  Other
  Source
• 2017Imperva sells Skyfence to Forcepoint

  Imperva sold its Skyfence business to Forcepoint for $40 million.

  M&A
  Source
• 2017Chris Hylen becomes Imperva president and CEO

  Chris Hylen, formerly associated with Citrix GetGo, succeeded Anthony Bettencourt as president and chief executive.

  Leadership change
  Source
• 2016Imperva releases Mirai-related device scanner

  The company published a free scanner intended to identify devices infected with or vulnerable to the Mirai botnet.

  Product launchOther
  Source
• 2014Imperva appoints Anthony Bettencourt as chief executive

  Anthony Bettencourt was named CEO during Imperva’s public-company period.

  Leadership change
  Source
• 2011Imperva becomes a public company on the New York Stock Exchange

  Imperva completed its public-market listing under the ticker IMPV.

  Other
  Source

1. Imperva
2. Imperva official website