Is Duo Security a separate company or owned by Cisco?

Duo Security has been a wholly owned Cisco Systems (NASDAQ: CSCO) business unit since Cisco acquired it for $2.35 billion in August/October 2018. It operates under the brand 'Cisco Duo' inside Cisco's Security Business Group, with no independent financials disclosed.

Could AI replace Duo Security's MFA product?

Basic push-MFA is exposed to AI-enhanced adversary-in-the-middle phishing documented against Microsoft 365 and Okta users as of May 2026, but Cisco launched Duo Agentic Identity in March 2026 to govern AI agent access, positioning Duo as securing AI rather than being replaced by it.

Is Microsoft beating Duo Security in the market?

PeerSpot's July 2026 authentication-systems rankings show Cisco Duo's category mindshare falling from 9.1% to 4.0% year over year, while Microsoft Entra ID gains share by bundling MFA into Microsoft 365 subscriptions, per 2026 buyer's guides.

Who is Duo Security's biggest competitor?

Duo's closest rivals in MFA/access security are Okta, Microsoft Entra ID, Ping Identity, RSA SecurID, JumpCloud, and CyberArk, according to a May 28, 2026 MFA buyer's guide; Microsoft is the incumbent actively taking category mindshare via 365 bundling.

What is Duo Agentic Identity?

Duo Agentic Identity is a Cisco product announced March 23, 2026 at RSA Conference that extends Zero Trust Access to AI agents, letting organizations register autonomous agents in Duo IAM, map them to accountable human owners, and enforce policy via MCP integration.

Cybersecurity companies · subsidiary of Cisco Systems, Inc. · United States

Duo Security

duo.com ↗

Duo makes login security (MFA) tools, owned by Cisco since 2018.

Losing its protection

Assessed 21 July 2026 · Evidence as of 21 July 2026

The structural protection is eroding.

On the recordSince 21 July 2026 · Checkable from late July 2026 · Every call on the record Checkpoint: Cisco Q4 FY2026 earnings and Security segment commentary

The call

Duo still runs deep inside thousands of companies, but Microsoft's free bundling and Cisco's shrinking headcount say the unit is fading, not growing.

Duo makes software that verifies who people are before they access company systems. It is owned by Cisco, not independent. Microsoft is winning by bundling its own verification tool free with Office 365 subscriptions, and Duo's popularity dropped from 9.1% to 4.0% in one year. Duo's team shrank from 626 people to 460 over four years, and Cisco is restructuring with unclear plans for Duo. The company is betting new AI-powered features reverse the slide, but if customers keep switching to Microsoft or if AI-powered hacking defeats basic verification tools, Duo could become a forgotten product that Cisco just maintains.

Why

AI pressure: AI-driven phishing and AiTM attacks bypassing push-based MFA. AI-generated phishing kits now beat simple push MFA, pushing customers toward Duo's Agentic Identity or rivals with stronger checks. Could AI do the core job? Only partly.

Bigger players: Microsoft Entra ID. Entra ID ships free inside Microsoft 365, and Duo's authentication mindshare fell from 9.1% to 4.0% in a year. Could a giant copy it? Yes, easily.

What protects it. Deep legacy integrations, Cisco's Talos threat data, and channel bundling keep switching costs high for existing customers.

What would change this call

Cisco Q4 FY2026 earnings commentary on Security segment and any Duo-specific mentions. Shows whether Cisco still prioritizes Duo or lets it fade in reporting.
PeerSpot mindshare re-measurement for Duo in Q4 2026 or Q1 2027. Confirms whether the 9.1% to 4.0% share decline continues or stabilizes.
Duo headcount count in future Crustdata or UpGuard reports through H1 2027. Indicates if Cisco's restructuring is cutting or preserving Duo staffing.

Key numbers

Authentication mindshare fell 9.1% to 4.0% YoY (2026)
Headcount dropped 626 to 460 since 2022 (2026-07)
Cisco Security segment revenue down 4% YoY to $2.018B (2026-Q2)

Named risks

Cisco restructuring (May 2026, up to $1B severance) may deprioritize Duo investment or staffing. Severity: high
Continued category mindshare erosion vs Microsoft Entra ID and Okta through 2026. Severity: high
AI-enhanced AiTM phishing bypassing commodity push-MFA, documented against M365/Okta users in 2026-05. Severity: medium
Cisco Security segment revenue down 4% YoY as of Q2 FY2026, pressuring unit-level resourcing. Severity: medium
No Cisco-disclosed Duo-specific financials; third-party revenue/headcount estimates conflict widely. Severity: low

Rivals, as read in July 2026

Rival	Direction	Evidence
Microsoft (Entra ID)	gaining on	Bundles MFA into Microsoft 365; Duo mindshare fell 9.1% to 4.0% YoY as of 2026-07
Okta	contesting	Holds larger, more stable authentication-systems mindshare per PeerSpot, 2026-07
CyberArk	contesting	Named among closest MFA/access-security competitors in 2026-05 buyer's guide
Ping Identity	contesting	Listed as direct MFA competitor in 2026-05 industry comparison
JumpCloud	contesting	Listed as direct MFA/IAM competitor in 2026-05 buyer's guide

Questions people ask

Is Duo Security a separate company or owned by Cisco?: Duo Security has been a wholly owned Cisco Systems (NASDAQ: CSCO) business unit since Cisco acquired it for $2.35 billion in August/October 2018. It operates under the brand 'Cisco Duo' inside Cisco's Security Business Group, with no independent financials disclosed.
Could AI replace Duo Security's MFA product?: Basic push-MFA is exposed to AI-enhanced adversary-in-the-middle phishing documented against Microsoft 365 and Okta users as of May 2026, but Cisco launched Duo Agentic Identity in March 2026 to govern AI agent access, positioning Duo as securing AI rather than being replaced by it.
Is Microsoft beating Duo Security in the market?: PeerSpot's July 2026 authentication-systems rankings show Cisco Duo's category mindshare falling from 9.1% to 4.0% year over year, while Microsoft Entra ID gains share by bundling MFA into Microsoft 365 subscriptions, per 2026 buyer's guides.
Who is Duo Security's biggest competitor?: Duo's closest rivals in MFA/access security are Okta, Microsoft Entra ID, Ping Identity, RSA SecurID, JumpCloud, and CyberArk, according to a May 28, 2026 MFA buyer's guide; Microsoft is the incumbent actively taking category mindshare via 365 bundling.
What is Duo Agentic Identity?: Duo Agentic Identity is a Cisco product announced March 23, 2026 at RSA Conference that extends Zero Trust Access to AI agents, letting organizations register autonomous agents in Duo IAM, map them to accountable human owners, and enforce policy via MCP integration.

Timeline

2026-05-13Cisco announces company-wide restructuring, up to $1B severance, reallocating to silicon, optics, security, AI
2026-03-23Cisco launches Duo Agentic Identity at RSA Conference for AI agent governance
2025-06-20Cisco touts Talos data: ~70% of 2024 ransomware attacks used valid stolen accounts
2025-05-28Cisco launches Duo Identity and Access Management (IAM), expanding beyond MFA
2024-02-14Ash Devata departs Cisco/Duo to become CEO of GreyNoise Intelligence
2018-10Cisco completes $2.35 billion cash acquisition of Duo Security
2010Duo Security founded in Ann Arbor, Michigan by Dug Song and Jon Oberheide

Revision history

21 July 2026

First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.

In the same band

Seqrite Meiya Pico NSFOCUS