WillItSurvive
Cybersecurity companies · United States

Anomali

Anomali sells a threat intelligence platform that helps security teams track and share attacker data.

Losing its protection
Assessed 21 July 2026 · Evidence as of 21 July 2026
The structural protection is eroding.
On the recordSince 21 July 2026 · Checkable from H1 2027 · Every call on the record Checkpoint: Whether the Goldman Sachs conference appearance leads to a new funding round or a sale
The call

Anomali has real threat data other companies want, but eight years without new funding and flat revenue show that data hasn't translated into growth while bigger rivals bundle similar intelligence for free.

Anomali gathers and sells information about cyber threats and cyber attackers to help companies protect themselves. The company built real relationships with industry groups and has proprietary data that is genuinely hard to copy, but this advantage is shrinking fast. Microsoft, Palo Alto Networks, and Cisco are all building their own threat intelligence systems inside much larger, more popular security platforms, and because they are so much bigger and already installed at most companies, they can add threat intelligence without Anomali being invited to the conversation. Anomali's revenue and headcount have flat-lined since 2022, and new features built in 2025 and 2026 have not yet turned into real business growth. The company could change its situation if it finds a large investor or gets bought by a different buyer before its resources run out, but if sales stay flat through 2027, a distressed sale or absorption into a larger company becomes more likely.

Why
01
AI pressure: Microsoft Copilot for Security, Palo Alto XSIAM. AI copilots now do the alert enrichment and IOC correlation work Anomali used to sell as its core product. Could AI do the core job? Only partly.
02
Bigger players: Cisco (Splunk), Palo Alto Networks (QRadar assets), Microsoft Sentinel. Cisco paid $28B for Splunk and Palo Alto absorbed QRadar, both bundling threat intel into platforms customers already buy. Could a giant copy it? Yes, easily.
03
What protects it. Its threat data lake and Trusted Circles sharing network hold years of member contributions that a new AI tool cannot instantly copy.
What would change this call
Whether Anomali announces new equity funding or a valuation figure after its Nov 2025 Goldman Sachs conference appearance. Would show investors still back the agentic-AI pivot at a real valuation, not a stagnant cap table.
Whether Anomali discloses updated customer count, ARR, or revenue growth tied to its Dec 2025 Copilot and Agentic SOC launch. Would show the AI pivot is converting to actual business growth, not just product announcements.
Whether Anomali is acquired, merges, or undergoes a down-round before H1 2027. Would confirm it lost the standalone race against consolidating giants like Cisco/Splunk and Palo Alto Networks.
Key numbers
  • Revenue flat near $64M since 2022 (Jul 2026)
  • No equity raise since 2018 Series D (Jul 2026)
  • Growth Score 6 out of 100 (Jul 2026)
Named risks
  • No new equity funding since 2018 despite active AI product pivot, raising down-round or acqui-sale risk. Severity: high
  • Flat to declining revenue and headcount for 4+ years amid giant-led market consolidation. Severity: high
  • Core IOC correlation and alert triage workflow being commoditized by generative and agentic AI industry-wide. Severity: medium
  • Recent C-suite churn in sales and growth leadership (2025) signals unresolved go-to-market struggles. Severity: medium
  • Sub-scale relative to $28 billion-plus consolidators leaves little room for independent survival. Severity: high
Rivals, as read in July 2026
RivalDirectionEvidence
Cisco (Splunk)losing toCisco's $28 billion Splunk acquisition consolidates SIEM/SOAR market Anomali just repositioned into, 2025-12-18
Palo Alto Networkslosing toAbsorbed IBM QRadar assets, listed as direct competitor by Crustdata, July 2026
Microsoft (Sentinel/Defender)contestingShips unified SecOps and Copilot AI features overlapping Anomali's Agentic SOC pivot, Dec 2025
Recorded Futurelosing toAcquired by Mastercard September 2024, cited as the actual threat-intel category leader
CrowdStrikecontestingRuns proprietary threat-intel operations and listed as direct competitor by Crustdata, July 2026
LogRhythm/Exabeamlosing toMerger cited as further SIEM/SOAR consolidation precedent in Anomali's own Dec 2025 blog post
Questions people ask
Is Anomali profitable or growing in 2026?
Third-party estimates from ZoomInfo and Growjo put Anomali revenue at roughly $63.9 to $64.3 million, essentially flat since 2022. Headcount has also stayed flat to declining, around 304 employees as of July 2026, down from 309 in April 2024.
Has Anomali raised new funding recently?
No. Anomali's most recent disclosed round is a $40 million Series D from January 2018, per Crustdata data as of July 8 2026. Total disclosed funding across six rounds since 2013 stands at $96.3 million, with no fresh raise announced despite a November 2025 Goldman Sachs conference appearance.
Could AI replace Anomali's core product?
Anomali itself says in a December 2025 blog post that 'the security stack is collapsing' as AI-native platforms absorb point solutions, directly commoditizing its traditional IOC correlation and alert triage workflow, though its threat-intelligence data lake and Trusted Circles network are harder for generic AI to replicate.
Who is Anomali's biggest competitor?
Anomali competes against much larger consolidators including Cisco (via its $28 billion Splunk acquisition), Palo Alto Networks (which absorbed IBM QRadar assets), Microsoft Sentinel and Defender, and CrowdStrike, all of which now ship unified SecOps and threat-intel offerings that overlap Anomali's repositioned Agentic SOC Platform.
Who owns Anomali?
Anomali is privately held and venture-backed with no parent company, per Pitchbook data. Investors include IVP, General Catalyst, GV (Google Ventures), Paladin Capital Group, Lumia Capital, Titanium Ventures, Sozo Ventures, DTCP, and IQT, with the last disclosed raise in January 2018.
What is Anomali's Agentic SOC Platform and when did it launch?
Anomali unveiled Agentic AI in April 2025 (general availability by May 2025), launched an AI-Powered Security Operations Platform with Anomali Copilot in December 2025, solidified the Agentic SOC Platform branding by March 2026, and won The Hacker News' 2026 Most Innovative SOC Platform award in July 2026.
Timeline
  • 2026-07-06Anomali wins The Hacker News 2026 Most Innovative SOC Platform award
  • 2026-03-19Anomali Agentic SOC Platform branding solidified, built on Unified Security Data Lake
  • 2025-12-18Anomali launches AI-Powered Security Operations Platform with Anomali Copilot
  • 2025-11Anomali slated to present at Goldman Sachs Private Innovative Company Conference
  • 2025-08-18Anomali appoints Chris Vincent as Chief Sales Officer
  • 2025-06-16Anomali appoints George Moser as Chief Growth Officer
  • 2025-04-29Anomali unveils integrated Agentic AI for threat detection and response
  • 2020-09-14Anomali discloses 1,500 customers, its last public customer-count figure
  • 2018-01Anomali closes $40 million Series D, its most recent disclosed funding round
  • 2016-02Company rebrands from ThreatStream to Anomali
Revision history
21 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources