Cofense
Cofense sells phishing detection and response, fed by a 35M+ human-reporter network across enterprises.
On the record
Checkpoint: Cofense mid-year threat report and webinar, plus ongoing Fortune 500 renewal cycles against Microsoft E5 bundling
The call
Cofense has real customers and a data network Microsoft and AI startups don't fully replicate yet, but its revenue trend and aging PE ownership leave the next two years unsettled.
Cofense helps large companies train employees to spot fake emails and reports on phishing threats using data from 35 million human reporters. The company has real customers (over 2,000 big firms) and real revenue, so it is not going away tomorrow. But it is getting squeezed from two sides at once: Microsoft is bundling similar training and reporting tools free inside its popular Office 365 email product, which reaches Cofense's own customers automatically, and newer AI-powered competitors like Abnormal Security do not need human reporters at all because they use artificial intelligence to spot phishing patterns instead. The one thing that would change the picture is if artificial intelligence gets so good at spotting fake emails that companies no longer need to train employees by hand, which would shrink Cofense's reason to exist even faster.
Why
01
AI pressure: Abnormal Security, Adaptive Security (OpenAI-backed). AI-native tools detect polymorphic phishing behaviorally, skipping the human-reporter step Cofense depends on to feed its data engine. Could AI do the core job? Only partly.
02
Bigger players: Microsoft Defender for Office 365. Microsoft bundles Report Message and Attack Simulation Training into E5 licenses at zero extra cost, undercutting Cofense's core offer. Could a giant copy it? Yes, easily.
03
What protects it. Its 35M+ human-reporter network and Fortune 500 install base give it phishing data that pure AI models don't have access to yet.
What would change this call
Cofense discloses actual ARR figures or files for IPO/sale, clarifying revenue trajectory. Would show whether revenue has shrunk toward $50M or held near $100M.
Fortune 500 customers publicly drop Cofense and cite Microsoft Defender or Abnormal Security as replacement. Would confirm bundled or AI-native rivals are winning renewals away from Cofense.
BlackRock announces sale, refinancing, or write-down of its Cofense stake. Would confirm aging PE ownership is exiting under pressure rather than growing the asset.
Fortune 500 customers publicly drop Cofense and cite Microsoft Defender or Abnormal Security as replacement. Would confirm bundled or AI-native rivals are winning renewals away from Cofense.
BlackRock announces sale, refinancing, or write-down of its Cofense stake. Would confirm aging PE ownership is exiting under pressure rather than growing the asset.
Key numbers
- 35M+ trained human reporters feeding threat data, 2025
- Revenue estimates range $52.5M to $91.7M vs $100M in 2019
- Headcount fell ~33% to roughly 354 employees
Named risks
- Aging 2018-vintage PE ownership past typical 5-7 year exit window creates sale or refinancing pressure.
- Microsoft ships competing phishing-report and training features free inside E5 bundle.
- Conflicting third-party revenue estimates leave true financial trajectory unclear.
- AI-native funded rivals (Abnormal, OpenAI-backed Adaptive) route around Cofense's human-reporter moat.
- New CEO since January 2025 still early in tenure, strategic direction unproven.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| Microsoft Defender for Office 365 | gaining on | Bundles native report button and Attack Simulation Training free in E5, per Microsoft docs updated 2025-12-04 |
| Abnormal Security | contesting | AI-native behavioral detection avoids reliance on human-reporter network Cofense depends on |
| Adaptive Security | gaining on | OpenAI-backed AI-native phishing/deepfake defense vendor named as KnowBe4/Cofense alternative, 2025-06-01 |
| KnowBe4 | contesting | Remains category leader in security awareness training market as of 2026 buyer guides |
| Proofpoint | contesting | Adjacent email-security incumbent not structurally blocked from adding reporting/training features |
Questions people ask
- Is Cofense profitable in 2026?
- Cofense is privately held and does not disclose audited financials. At its 2018 buyout it targeted $100M ARR on ~80% prior four-year revenue CAGR (2018-02-26). No profitability figures have been publicly confirmed since, and third-party revenue estimates conflict widely as of 2026.
- Who owns Cofense?
- Cofense (formerly PhishMe) was bought by a PE consortium including BlackRock and Pamplona Capital for $400M on 2018-02-26. Pamplona's stake was divested to BlackRock-managed funds on 2019-08-21 amid CFIUS scrutiny over a sanctioned Pamplona investor. BlackRock-affiliated funds remain the reported owner.
- Could AI replace Cofense?
- Cofense's core value is a 35M-plus human-reporter network (as of 2025-12-09), but Microsoft Defender for O365 already bundles native phishing reporting and Attack Simulation Training free in E5 licenses, and OpenAI-backed Adaptive Security is building AI-native detection that bypasses human reporters entirely.
- Is it safe to take a job at Cofense?
- Cofense has real customers (2,000-plus enterprises, roughly half the Fortune 500 per 2023 company claims) and shipped product updates through May 2026, suggesting near-term paycheck stability. Longer-term risk comes from its aging 2018-vintage PE ownership and Microsoft's bundled competing features.
- Who is Cofense's biggest competitor?
- Cofense competes with Microsoft Defender for O365 (native bundled reporting/training in E5), category leader KnowBe4 in awareness training, adjacent giant Proofpoint, and AI-native entrants Abnormal Security and OpenAI-backed Adaptive Security, the latter flagged in a 2025-06-01 competitor analysis.
- Has Cofense had layoffs?
- There is no company-confirmed layoff announcement. Some third-party headcount estimates suggest contraction after the 2018 PE-driven scale-up, but Cofense itself has not disclosed workforce reduction figures; the company continued shipping product releases through May 2026.
Timeline
- 2026-05-13Cofense launches Vision AI 3.2, Triage 3.0 and AI Assistant for campaign-level phishing detection
- 2026-02-04Cofense report: malicious email attacks hit one every 19 seconds in 2025, up from every 42 seconds in 2024
- 2025-12-09Cofense launches Smart Reinforcement training and Triage 1.30 with AI Confidence Score
- 2025-01-08Marc Olesen named Cofense CEO, succeeding co-founder Rohyt Belani
- 2019-08-21Pamplona's stake divested to BlackRock-managed funds amid CFIUS sanctions scrutiny
- 2018-02-26PhishMe acquired by BlackRock/Pamplona PE consortium for $400M, renamed Cofense
Revision history
21 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- PhishMe® Acquired by Private Equity Syndicate and Rebrands as Cofense™ (2018-02-26)
- Cofense Secures BlackRock-Managed Funds Investment (2019-08-21)
- Cofense - Overview, News & Similar companies (2026-07-06)
- Private Equity Giants Buy Cyber Firm PhishMe for $400 Million (2018-02-26)
- Cofense Stock Price, Funding, Valuation, Revenue & Financial Statements (2021-04-06)
- Cofense Platform Story (2023-01-25)
- Cofense Delivers Faster, Smarter Phishing Defense with New Capabilities (2025-12-09)
- Revenue, Competitors, Alternatives (2022-04-19)
- Cofense Appoints Marc Olesen as Chief Executive Officer (2025-01-08)
- Cofense Report Reveals AI-Powered Phishing Accelerated to One Attack Every 19 Seconds (2026-02-04)
- Cofense Launches AI-Driven Campaign Detection to Unified Phishing Defense Platform (2026-05-13)
- Best KnowBe4 Alternatives & Competitors (2025-06-01)