Okena
Okena was a United States intrusion-detection company whose behavior-based endpoint security technology became the foundation of Cisco Security Agent.
Last updated August 31, 2026
Overview
Okena was an intrusion-detection and endpoint-security company founded in 1999 by Todd Brennan and Allen Hillery. The company was initially located in Cambridge, Massachusetts, and later based in Waltham, Massachusetts. Its central technical proposition was behavior-based detection and prevention: rather than relying primarily on known binary or signature patterns, Okena's software monitored endpoint activity and identified behavior associated with attacks or policy violations. Okena's technology occupied an important transitional position in the development of intrusion detection and prevention. Traditional intrusion-detection systems commonly sought recognizable patterns associated with known threats. Okena instead emphasized the actions performed by software and users on a computer, allowing its endpoint agent to block certain behaviors and attacks. This made the product an early example of an intrusion detection and prevention system, or IDPS, rather than a passive monitoring tool alone. The company's principal offering was StormWatch, an endpoint-security software platform built around behavioral monitoring and prevention. The endpoint agent could observe activity on protected systems and intervene when behavior matched defined attack or abuse conditions. The available reference material does not provide a full product catalog, detailed customer list, revenue history, or information about Okena's later commercial operations, so those aspects remain undocumented here. Cisco Systems acquired Okena on January 24, 2003, in an all-stock transaction valued at $154 million at the time. Following the acquisition, Okena's StormWatch technology formed the basis of the Cisco Security Agent. The transaction therefore ended Okena as an independent company while carrying its core endpoint-security technology into Cisco's security portfolio. Okena is consequently best understood as a defunct security-software company and a technology predecessor to a Cisco security product, rather than as an active standalone brand.
History
Okena was established in 1999 by Todd Brennan and Allen Hillery. Its initial location was Cambridge, Massachusetts, before the company became associated with Waltham, Massachusetts. The company developed software for intrusion detection and endpoint protection at a time when security products were increasingly moving beyond passive alerting toward active prevention. Okena's distinguishing technical approach was behavior-based detection. Many intrusion-detection products of the period focused on binary or signature patterns: they attempted to identify previously characterized malicious code or recognizable attack strings. Okena's software instead examined what programs and users were doing on an endpoint. This approach was intended to identify harmful or unauthorized activity based on behavior, including activity that might not match a previously cataloged pattern. The company's StormWatch endpoint-security software included an agent capable of blocking certain behaviors and attacks. That prevention capability made Okena an early example of the intrusion detection and prevention model later commonly described as IDPS. The product therefore combined monitoring with enforcement on the protected endpoint, rather than limiting its function to reporting suspicious events. Cisco Systems acquired Okena on January 24, 2003. The transaction was an all-stock deal valued at $154 million. After the acquisition, Okena's technology was incorporated into Cisco's security portfolio, with StormWatch forming the basis of Cisco Security Agent. This marked the end of Okena's independent corporate existence and transferred its principal technology into Cisco's product organization. The available historical record is concise and does not document Okena's revenue, customer base, detailed organizational structure, subsequent executives, or product releases beyond StormWatch and its relationship to Cisco Security Agent. Its principal historical significance lies in its behavioral endpoint-security model and in the acquisition that helped Cisco extend its security offerings into host-based detection and prevention.
- 2003Cisco completes acquisition of Okena
Cisco Systems acquired Okena on January 24, 2003, through an all-stock transaction valued at $154 million.
- 2003StormWatch technology becomes the basis of Cisco Security Agent
Following the acquisition, Okena's StormWatch endpoint-security technology was used as the foundation for Cisco Security Agent.
- 1999Okena is founded
Todd Brennan and Allen Hillery founded Okena. The company was initially located in Cambridge, Massachusetts.
Products and positioning
Behavior-based endpoint intrusion detection and prevention, with the ability to block certain malicious or unauthorized behaviors rather than only recognize known binary patterns.
StormWatchEndpoint security and intrusion detection/prevention
StormWatch was Okena's endpoint-security software platform. Its agent used behavior-based detection to monitor activity on protected systems and could block certain behaviors and attacks. The product represented an early form of intrusion detection and prevention because it combined detection with active endpoint enforcement. After Cisco acquired Okena, StormWatch technology formed the basis of Cisco Security Agent.
Cisco Security AgentEndpoint security software
Cisco Security Agent was not an Okena-branded product, but it is the principal product lineage associated with Okena's acquisition. Cisco based the agent on Okena's StormWatch technology, carrying the latter's behavior-based endpoint monitoring and prevention approach into Cisco's security portfolio.
Flagship businesses
- StormWatch
Brand decisions
- 2003Cisco acquires OkenaM&A
Okena had developed behavior-based endpoint intrusion detection and prevention technology through its StormWatch software. Cisco Systems acquired the company as part of the expansion of its security portfolio.
What changed. Cisco completed the acquisition on January 24, 2003, in an all-stock transaction valued at $154 million.
Aftermath. Okena ceased operating as an independent company, while StormWatch technology became the basis of Cisco Security Agent.
Transaction value. $154 million (January 24, 2003 acquisition announcement/completion)
Leadership
| Name | Title | Tenure |
|---|---|---|
| Allen Hillery | Co-founderformer | 1999– |
| Todd Brennan | Co-founderformer | 1999– |
Recent events
- 2003Cisco Systems acquires Okena
Cisco Systems acquired Okena on January 24, 2003, in an all-stock transaction valued at $154 million. Okena's StormWatch technology subsequently became the basis of Cisco Security Agent.
M&AProduct generation
Sources
Cite this profile: Cite the canonical profile. /brand-wiki/okena · Editorial policy · How profiles are compiled