San Francisco, California, United States
Corelight is a cybersecurity company specializing in network traffic analysis (NTA) solutions, providing tools to investigate and prevent cybersecurity threats.
- Revenue
- $98.2M
- Year founded
- 2013
- Team size
- 417
As of October 2026, Latka tracks 71 incident response software companies with $10M–$100M in annual revenue. They have combined revenues of $2.2B and employ 12.9K people. They have raised $1.6B and serve 3M customers combined.
Every company below sells incident response software to other businesses and is ranked by its most recent annual revenue. Revenue, funding, headcount and customer figures come from CEO interviews on the Latka podcast, public company filings, and Latka estimates where a company has not disclosed a number.
Incident Response Software encompasses tools designed to help organizations identify, manage, and mitigate security incidents. These solutions are essential for responding efficiently to a variety of incidents, including cybersecurity breaches, system failures, and operational disruptions. They typically support workflows that include incident detection, classification, escalation, and resolution, enabling teams to address issues systematically and effectively. Key features often found in incident response software include automated workflows, role-based access controls, real-time monitoring, incident logging, and reporting capabilities. Organizations ranging from IT departments to security compliance teams utilize these tools to streamline their responses, improve communication during incidents, and enhance overall security posture. By integrating these solutions into their operations, organizations can significantly reduce the time it takes to remediate issues and prevent recurrence. Typical users of incident response software include IT security professionals, incident response teams, and compliance officers, who rely on these tools to ensure organizational safety and adherence to regulatory standards. The software is critical in environments where rapid incident recovery is necessary to maintain business continuity and protect sensitive data.
Sorting: Highest -> Lowest
Showing 10 of 71 companies ranked by annual revenue.
San Francisco, California, United States
Corelight is a cybersecurity company specializing in network traffic analysis (NTA) solutions, providing tools to investigate and prevent cybersecurity threats.
Plano, Texas, United States
LevelBlue, formerly AT&T Cybersecurity, is a Managed Security Service Provider (MSSP) delivering top-tier security across networks & digital spaces.
Reading, Pennsylvania, United States
Managed service and managed security service provider to mid-market organizations within financial services, government, manufacturing, healthcare and professional services
Fairfax, Virginia, United States
Firm partnering with government agencies to deliver IT solutions, including cloud and infrastructure, enterprise applications, cybersecurity and more
Boston, Massachusetts, United States
Provider of a cyber-security and compliance platform designed to secure business-critical applications. The company's compliance platform includes preventative vulnerability and compliance controls, as well as real-time detection and incident response capabilities to reduce risks affecting critical business processes and data, enabling clients to seamlessly incorporate enterprise applications into existing risk and incident response management programs and automate the monitoring and protection of SAP and Oracle ERP, keeping them compliant and safe from insider and outsider threats.
Dublin, Dublin, Ireland
Developer of a security orchestration automation and response platform intended to simplify enterprise security. The company's platform allows security teams to automate any workflow and also produces automated phishing responses which help to integrate directly with any tool in the technology stack, enabling its users to do their task more efficiently with the help of security.
Austin, Texas, United States
Halcyon is a cybersecurity business that develops tools to protect enterprise clients from ransomware. It is the industry's first dedicated, adaptive security platform that combines multiple proprietary advanced prevention engines along with AI models.
Seattle, Washington, United States
We’re on a mission to reveal cyber risk and build business resilience by exposing the threats organizations can’t see. The ExtraHop Reveal(x) network detection and response (NDR) platform uniquely delivers the visibility and decryption capabilities that organizations need to investigate smarter, stop threats faster, and keep operations running.
Frederick, Maryland, United States
Provider of quality IT, cybersecurity and professional services and support for federal and commercial customers across the country
San Francisco, California, United States
Panther Labs provides a refreshingly practical platform for threat detection and response, powered by a highly scalable security data lake and detection-as-code. It aims to make security teams smarter and faster than attackers, with a cloud-native architecture and real-time alerts.
Latka tracks 71 incident response software companies with $10M–$100M in annual revenue. Together they generate $2.2B in annual revenue and employ 12.9K people.
Corelight is the largest, with $98.2M in annual revenue, founded in 2013.
The average incident response software company in this list makes $30.6M a year, across 71 companies with reported revenue. They serve 3M customers combined.
Ranked by annual revenue, the leaders are Corelight, LevelBlue, Omega Systems, ITC Federal and Onapsis.
The 71 incident response software companies with $10M–$100M in annual revenue tracked here have raised $1.6B in disclosed funding between them.
- Must facilitate the detection and management of security incidents. - Should offer automated workflows for incident response processes. - Must provide real-time monitoring and alerting capabilities. - Should include incident logging and reporting functionalities. - Must support role-based access for effective task management. - Not just basic monitoring; must also enable detailed incident analysis and prioritization.
Sign up to access all features
Sign up with GoogleSign up with LinkedInAlready have an account? Log in
GetLatka is trusted by 200k+ founders, researchers, and marketers.
No contracts, cancel at any time