Threat X

Market position

ThreatX competes in the web application and API protection (WAAP) segment, a crowded market that includes established application-delivery and edge-security vendors such as Radware, Fastly, Cloudflare and Reblaze. It has been cited by Gartner as a Representative Vendor in the Market Guide for Cloud Web Application and API Protection and as a Sample Vendor in 2023 Hype Cycle reports for Application Security, APIs, and Workload and Network Security, and was ranked on the 2023 Deloitte Technology Fast 500. Revenue has been estimated in the $10M-$25M range against a small employee base.

The platform's stated differentiator is a kill-chain, behavior- and risk-profiling approach rather than signature matching: suspicious activity is tracked and correlated into an attacker risk profile, and blocking occurs only once a clear audit trail of attempted exploitation exists, which the company positions as reducing false positives. Rapid deployment without extensive tuning, with active and accurate blocking within 24 hours, and a managed security-as-a-service delivery model are also cited as distinguishing characteristics.

Technology

A cloud-delivered detection and blocking engine that sits in front of web applications and APIs across hybrid cloud, cloud and legacy environments, covering web, mobile and IoT APIs. It applies machine learning to profile application behavior and correlates early-stage suspicious activity into attacker risk profiles before blocking. The product set includes API protection, bot management and a next-generation web application firewall (TX Protect), plus an eBPF-based runtime vulnerability prevention product (TX Prevent) that provides real-time visibility into vulnerabilities and complements SAST, DAST and WAF tooling. Reported infrastructure and stack elements include Kubernetes, Microsoft Azure, Amazon Route 53, Apache, Nginx and C.

Go-to-market

Go-to-market has centered on direct sales to security and development teams, supported by industry analyst recognition (multiple Gartner report mentions), awards and growth rankings such as the Deloitte Technology Fast 500, plus customer education through the ThreatX Academy training portal. Post-acquisition, the technology is distributed through A10 Networks' enterprise channel and installed base.

Mid-market and large enterprises with internet-exposed web applications and APIs, particularly organizations undergoing API-first modernization or cloud-native deployment, and security teams with limited staffing that prefer a managed service. Buyers include developers, security teams and CISOs.

Geography

The company was founded and initially headquartered in Denver, Colorado, and later listed a Boston, Massachusetts office at 225 Friend Street, Suite 805. Its workforce has been reported as distributed across North America, Asia and Europe. Acquirer A10 Networks is headquartered in San Jose, California.

History

Founded in 2014, the company was originally based in Denver, Colorado, and raised an $8.2 million Series A co-led by Grotech Ventures and Access Venture Partners under co-founder and CEO Brett Settle. It later operated from Boston, Massachusetts, at 225 Friend Street. In 2022 it launched ThreatX Academy, a cybersecurity training portal, and in 2023 it received a series of industry recognitions, including placement on the Deloitte Technology Fast 500 and identification as a Representative Vendor in the Gartner Market Guide for Cloud Web Application and API Protection. On February 12, 2025, A10 Networks announced it had acquired the assets and key personnel of ThreatX Protect; CEO at the time of the transaction was Gene Fay. The remaining ThreatX assets, including the eBPF-based TX Prevent product, were relaunched as Run Security with RS Prevent.