Team Cymru
Threat intel firm selling internet visibility from ISP telemetry and passive DNS data.
On the record
Checkpoint: Audax-backed exit or recapitalization window opens as new CFO builds for 'institutional investment'
The call
The data pipeline looks hard to replace, but who owns the company and what happens to equity holders is now the open question.
Team Cymru collects information about internet traffic and domain names by working with over 800 internet service providers, then sells that data to security companies and governments. It is hard to copy because those partnerships took 20 years to build and competitors like Recorded Future actually buy Team Cymru's data instead of making their own. The big change on the horizon: the private equity owner (Audax) recently hired a finance executive to prepare for a sale, which means current employees should carefully check their stock agreements to see if they will get paid when the company sells.
Why
01
AI pressure: Generic LLM copilots and AI triage tools (e.g. Recorded Future AI Insights). AI can mimic the query and triage layer, but not the raw ISP telemetry, so Team Cymru now sells into AI agents via its own MCP server. Could AI do the core job? Unlikely.
02
Bigger players: Cloudflare, Microsoft, or a tier-1 carrier building native internet-scale telemetry. No hyperscaler has replicated 800+ ISP data-sharing deals at internet scale yet, but any of them technically could. Could a giant copy it? No, they are blocked.
03
What protects it. 20 years of ISP-shared NetFlow and passive DNS data that competitors and hyperscalers cannot easily replicate or buy.
What would change this call
Audax sells, recaps, or takes Team Cymru public within 3-5 years of the 2021 investment. Would confirm PE exit dynamics and clarify equity outcomes for stakeholders.
Team Cymru discloses whether it hit the $100M ARR target stated in its 2024 announcement. Would show whether commercial scale-up is on track or stalling.
Cloudflare, Microsoft, or a tier-1 carrier launches native internet-scale NetFlow/passive-DNS telemetry. Would show whether a hyperscaler is eroding Team Cymru's data-origination moat.
Team Cymru discloses whether it hit the $100M ARR target stated in its 2024 announcement. Would show whether commercial scale-up is on track or stalling.
Cloudflare, Microsoft, or a tier-1 carrier launches native internet-scale NetFlow/passive-DNS telemetry. Would show whether a hyperscaler is eroding Team Cymru's data-origination moat.
Key numbers
- $100M ARR target announced publicly
- $63M total disclosed funding raised
- 800+ ISP data-sharing partnerships claimed
Named risks
- Audax private equity ownership since 2021 plus June 2026 CFO hire for 'institutional investment, strategic acquisitions' signals likely exit or recap that could reshape equity terms.
- Passive network telemetry collection has previously drawn 'data broker' allegations; future EU or US privacy regulation on such collection could constrain the core data model.
- Headcount and commercial growth appear flat historically (120-135 employees), suggesting slow conversion despite new leadership and product launches.
- A hyperscaler such as Cloudflare or Microsoft shipping equivalent internet-scale native telemetry could erode the ISP-partnership data moat over time.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| Recorded Future | contesting | Named Gartner MQ Leader May 2026 but positioned as customer/aggregator of Team Cymru data, not data-origination rival |
| Censys | contesting | Listed among direct alternatives in internet-visibility and attack-surface category, per competitor trackers |
| GreyNoise | contesting | Cited as peer threat-intel/telemetry vendor competing on analyst-facing tooling |
| DomainTools | contesting | Cited as peer in threat intelligence and domain/passive-DNS visibility space |
Questions people ask
- Is Team Cymru profitable in 2026?
- No audited financials are public. In March 2024 the company itself said it was 'setting sights on $100M ARR' with new executive hires, implying revenue was below that milestone at the time. Profitability has never been disclosed.
- Who owns Team Cymru?
- Team Cymru is privately held and backed by Audax Private Equity, which made a growth investment in August 2021. Founder Rob Thomas remains on the board after stepping down as CEO in April 2025.
- Could AI replace Team Cymru?
- Unlikely soon. Team Cymru's moat is proprietary telemetry from 800+ ISP data-sharing partnerships collected over two decades, which a generic LLM cannot originate. It ships its own AI-agent MCP server (April 2026) rather than being displaced by one.
- Is Recorded Future Team Cymru's biggest competitor?
- Recorded Future (Gartner Magic Quadrant Leader, May 2026) is described as sitting above Team Cymru as a customer or aggregator of its data rather than a direct rival at the raw-telemetry layer where Team Cymru originates its Pure Signal data.
- Who is Team Cymru's CEO?
- Joe Sander became CEO in April 2025, succeeding founder Rob Thomas who led the company for two decades and remains on the board. Sander previously served as CEO of Radiant Logic.
- Has Team Cymru had layoffs?
- No layoffs are reported. Third-party trackers estimate headcount at roughly 120-135 employees with flat recent growth, while the company has actively added senior leaders (CEO, CFO, CRO, CMO) since 2024.
Timeline
- 2026-06-08Eric Carlson named CFO for institutional investment, acquisitions, global expansion readiness
- 2026-06Named INTERPOL Gateway Partner; APJ office expansion announced in Sydney
- 2026-05-18Supported INTERPOL Operation Ramz: 201 arrests, 3,867 victims across 13 MENA countries
- 2026-04-29Launched Pure Signal MCP Server, industry first purpose-built AI-agent connector for threat intel
- 2026-01Supported Africa law-enforcement operation resulting in 574 arrests
- 2025-11Launched RADAR attack-surface and infrastructure-visibility product
- 2025-04-28Joe Sander appointed CEO, succeeding founder Rob Thomas
- 2025-03-20Microsoft Security Copilot plugin reached general availability
- 2024-05-06Launched Pure Signal Scout Insight, gen-AI SOC investigation tool with Splunk integration
- 2021-08-04Audax Private Equity announced growth investment in Team Cymru
Revision history
21 July 2026
First assessed. Defensible for now. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- Team Cymru Sets Sights on $100M ARR with Key Executive Appointments (2024-05-13)
- Management and Employees List
- Audax Private Equity Announces Investment in Cyber Threat Intelligence Leader Team Cymru (2021-08-04)
- Team Cymru - $63M Raised - Reviews & Alternatives (2026-05-01)
- Team Cymru Stock Price, Funding, Valuation
- Team Cymru announces Veteran Growth Leader Joe Sander as CEO (2025-04-28)
- Revenue, Competitors, Alternatives
- Team Cymru
- Team Cymru Sets Sights on $100M ARR With Key Executive Appointments (2024-03-13)
- Executive Team & Board of Directors
- Pure Signal
- Team Cymru and OpenCTI Partner (2026-01-14)