Who owns Imperva now?

Imperva has been a wholly owned subsidiary of French defense and cybersecurity group Thales since December 4, 2023, when Thales completed its acquisition from Thoma Bravo at a €3.6 billion enterprise value, folding Imperva into its Digital Identity and Security segment.

Is Imperva profitable?

Imperva does not publish standalone financials post acquisition. Thales's 2023 guidance targeted a 16.5% EBIT margin and +6 to 7% organic growth for the Digital Identity and Security segment (which includes Imperva) by 2027, but no Imperva specific profit figure has been disclosed.

Is Imperva doing layoffs?

Headcount fell roughly 25% from about 2,059 employees in 2023 to about 1,549 in December 2025 per Revelio Labs, with job postings down 66.7% in 2025 versus 2023, signaling ongoing post acquisition contraction rather than a single layoff event.

Who is Imperva's biggest competitor?

Cloudflare and Akamai are Imperva's closest rivals, with all three ranked in the top three of Gartner's 2025/2026 cloud WAAP Magic Quadrant as of June 2026; hyperscaler native WAF from AWS, Azure and Google Cloud is a longer term bundling threat.

Could AI replace Imperva's security products?

Unlikely soon. Liability and compliance requirements in regulated industries keep security decisions human governed, and Imperva itself deploys AI/ML defensively, reportedly blocking about 25 million AI driven bot attacks daily as of its 2026 Bad Bot Report.

Is Imperva a safe company to join right now?

Mixed signal. Imperva is a top three ranked WAAP leader with a stable Thales parent, but job postings dropped 66.7% in 2025 versus 2023 and headcount has declined about 25% since the 2023 acquisition, suggesting limited near term hiring growth.

Cybersecurity companies · subsidiary of Thales Group · United States

Imperva

imperva.com ↗

Web app, API and data security vendor, top-3 in WAAP rankings, owned by Thales.

Protection under test

Assessed 21 July 2026 · Evidence as of 21 July 2026

Something worth protecting exists and is being tested right now.

On the recordSince 21 July 2026 · Checkable from 2026-2027 · Every call on the record Checkpoint: Imperva for Google Cloud moves from Controlled Availability to General Availability

The call

Imperva holds a top-3 security ranking and Thales's backing, but shrinking headcount and dark financials inside Thales leave its growth trajectory unclear.

Imperva sells software that protects websites and apps from attacks and helps companies follow rules like GDPR. It is hard to copy because banks and hospitals are locked into its systems for compliance and trust its threat data, but Cloudflare and Akamai are taking customers away, and Amazon, Microsoft, and Google are starting to offer similar protection built into their own clouds for free. The real question is whether Thales, its new owner, is investing in Imperva's future or quietly cutting it down to save money: the company has lost one-third of its staff since the acquisition in late 2023, which could mean either smart cost-cutting or a slow fade.

Why

AI pressure: AI-driven bot swarms and scraper agents attacking customer sites. AI bots now drive 12.5x more attacks and over half of web traffic, feeding demand for Imperva's filtering rather than replacing it. Could AI do the core job? Unlikely.

Bigger players: Cloudflare, Akamai, and AWS/Azure/Google native WAF bundling. Cloudflare and Akamai already contest the same Gartner rankings, while hyperscalers bundle WAF free into cloud plans, squeezing standalone vendors. Could a giant copy it? Probably.

What protects it. Deep compliance workflows, proprietary attack data from 35,000+ customers, and Thales's balance sheet keep regulated buyers locked in.

What would change this call

Thales DIS segment reports flat or shrinking organic revenue in next disclosure. Would show Imperva is being squeezed for margin rather than grown.
Imperva headcount drops another 20%+ or gets folded into CipherTrust branding. Would signal wind-down rather than integration.
Imperva for Google Cloud reaches General Availability with visible customer adoption. Would show Imperva gaining ground against Cloudflare/Akamai on hyperscaler integration.

Key numbers

Headcount fell 24.8%, 2,059 to 1,549 (Dec 2025)
Job postings down 66.7% vs 2023 (2025)
Blocks ~25M AI bot attacks daily (2026)

Named risks

Post acquisition headcount down about 25% (2,059 to 1,549) with no public bottom confirmed. Severity: high
Hyperscaler bundled native WAF erodes standalone WAAP demand long term. Severity: medium
No standalone Imperva financials disclosed, obscuring real growth or decline inside Thales DIS. Severity: medium
Gartner methodology shifts and Cloudflare momentum could reshuffle Imperva's market ranking. Severity: medium

Rivals, as read in July 2026

Rival	Direction	Evidence
Cloudflare	contesting	Ranked top 3 alongside Imperva in Gartner 2025/2026 cloud WAAP MQ as of June 2026
Akamai	contesting	Ranked top 3 alongside Imperva in same Gartner WAAP MQ, June 2026
AWS, Azure, Google Cloud (native WAF)	gaining on	Hyperscalers bundle native WAF, prompting Imperva to launch integration on Google Cloud, April 2026
F5	contesting	Listed as direct peer in Gartner WAF/WAAP comparison pages as of 2026

Questions people ask

Who owns Imperva now?: Imperva has been a wholly owned subsidiary of French defense and cybersecurity group Thales since December 4, 2023, when Thales completed its acquisition from Thoma Bravo at a €3.6 billion enterprise value, folding Imperva into its Digital Identity and Security segment.
Is Imperva profitable?: Imperva does not publish standalone financials post acquisition. Thales's 2023 guidance targeted a 16.5% EBIT margin and +6 to 7% organic growth for the Digital Identity and Security segment (which includes Imperva) by 2027, but no Imperva specific profit figure has been disclosed.
Is Imperva doing layoffs?: Headcount fell roughly 25% from about 2,059 employees in 2023 to about 1,549 in December 2025 per Revelio Labs, with job postings down 66.7% in 2025 versus 2023, signaling ongoing post acquisition contraction rather than a single layoff event.
Who is Imperva's biggest competitor?: Cloudflare and Akamai are Imperva's closest rivals, with all three ranked in the top three of Gartner's 2025/2026 cloud WAAP Magic Quadrant as of June 2026; hyperscaler native WAF from AWS, Azure and Google Cloud is a longer term bundling threat.
Could AI replace Imperva's security products?: Unlikely soon. Liability and compliance requirements in regulated industries keep security decisions human governed, and Imperva itself deploys AI/ML defensively, reportedly blocking about 25 million AI driven bot attacks daily as of its 2026 Bad Bot Report.
Is Imperva a safe company to join right now?: Mixed signal. Imperva is a top three ranked WAAP leader with a stable Thales parent, but job postings dropped 66.7% in 2025 versus 2023 and headcount has declined about 25% since the 2023 acquisition, suggesting limited near term hiring growth.

Timeline

2026-06-28Gartner MQ ranks Imperva top 3 in cloud WAAP alongside Akamai and Cloudflare
2026-04-29Thales Bad Bot Report says AI driven bot attacks surged 12.5x year over year
2026-04-22Thales launches Imperva for Google Cloud in Controlled Availability
2025-12Imperva headcount falls to about 1,549, down 24.8% from 2023 per Revelio Labs
2025KuppingerCole names Imperva Overall Leader in API Security and Leader in WAAP
2023-12-04Thales completes acquisition of Imperva for €3.6 billion enterprise value
2023-07-25Thales announces Imperva deal; Imperva reports over $500M TTM revenue, about 1,400 staff
2019Thoma Bravo takes Imperva private after prior NYSE listing

Revision history

21 July 2026

First assessed. Protection under test. The text above is fixed as of this date and is not edited afterwards.

In the same band

Sangfor Technologies Beijing Topsec Technology SecureMetric