Many security start-ups are focusing on protection at the network level, rather than individual computers or hardware, spurred by the proliferation of mobile devices and cloud computing trend, where data is stored on the Web.
“It’s an area of huge interest to us,” said Bill Maris, managing partner for Google Ventures, which earlier this year invested an undisclosed amount in Dasient, a Sunnyvale, California-based company that protects websites from malware attacks.
“It’s a really difficult-to-solve problem ... and there’s a lot of opportunity there,” he said.
Venture investment in the information-technology security sector this year looks set to exceed last year’s $432.3 million, after already hitting $147.4 million in the first quarter, according to Thomson Reuters data from the National Venture Capital Association.
While much lower than the billion-dollar levels before the 2008 financial crisis, the numbers show a resurgence of Silicon Valley interest in the sector, fueled by three main factors.
The first is the string of cyber attacks on companies ranging from Citigroup to Sony, and institutions from the International Monetary Fund to the US Senate.
“People are just seeing what’s going on with threats every day,” said Greylock Partners’ Asheem Chandna, who formerly ran business development and product management at security company Check Point Software and now oversees Greylock’s security investments.
The second reason is the shift in computing away from desktop computers toward mobile and the cloud, which requires new security systems to match.
The limited battery life of mobile devices boosts the attractiveness of security that runs on the network, rather than hogging battery on the mobile device, said Dasient Chief Executive Paul Stich.
Thirdly, spurring on VCs is the demand from larger technology companies to buy smaller ones that fill gaps in their security portfolios.
There have been big deals, such as Intel Corp’s acquisition of McAfee Inc, the No. 2 US security software maker, for $7.68 billion this year. Smaller deals, such as Dell’s purchase of network security firm SecureWorks, backed by Noro-Moseley Partners, Alliance Technology Ventures and Sbk Capital, and Hewlett-Packard Co’s acquisition of software security company Fortify, whose backers included Kleiner Perkins.
The IPO market is also looking good for venture capital firms eyeing exit strategies.
Cybersecurity companies such as Sourcefire and Websense have found favor with investors, and a number of brokerages including Bank of America and Citigroup have recently started rating or upgrading their price targets on these firms.
“There is absolutely no question that this (sector) is going to be at the focal point in the future in terms of investments. Everyone is showing a lot of interest,” said Robert Francello, head of equity trading at Apex Capital in San Francisco.
A number of security firms look set to tap public markets in the next year or so, VC investors say privately.
They say that group could include network-security company Barracuda Networks, whose backers include Sequoia Capital; e-mail security company Proofpoint, whose backers include DAG Ventures; firewall company Palo Alto Networks, whose backers include Greylock and Sequoia; and data security company Imperva, whose backers include Meritech Capital, Accel Partners, and Greylock.
Last week, Jim Goetz, a partner at Sequoia, said Palo Alto was considering an initial public offering. Representatives for Barracuda and Proofpoint said they did not have timelines for an IPO, and a spokesman for Imperva declined to comment.
