Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

Sourcefire Glows on Debut

First security IPO in months opens with higher than expected share price

In its first day of trading as a public company, Sourcefire shares opened at $15 -- higher than initial estimates -- and peaking at $16.45 before they closed at $15.49. (See Sourcefire Fires Up for IPO and Sourcefire Shapes Up for IPO.)

And for its trouble, the open-source security vendor raised $89.4 million today, well above its estimate of $80.8 million.

Trading under the symbol "FIRE," the company originally priced its 5,770,000 shares between $12 and $14, although these were over-subscribed in the run-up to today's IPO.

Recent tech sector IPOs have seen shares skyrocket during their first day of trading. What makes Sourcefire's IPO significant is the fact that very few security startups make public offerings at the moment. Over the last few years M&A has become a much more likely exit strategy in the security space. (See Cisco Buys IronPort , Radware Unveils Security Strategy, and Symantec Buys Altiris for $830M.)

Sourcefire is also unique among recent IPOs in that its flagship Snort IDS technology is open source. To date, there have been 3 million downloads of Snort, and, in a recent SEC filing, the vendor cited more than 100,000 registered users of the technology.

Over the coming months, Sourcefire is looking to exploit this installed base to sell its 3D family of security products, which includes its Defense Center hardware for analyzing network data and enforcing policies.

An S-1 document filed with the SEC last week reveals that the vendor is also planning to target its Intrusion Sensor product at branch offices and remote locations.

The IPO will also help fund international expansion. Last year, only 19 percent of Sourcefire's revenue came from international customers, although the vendor is now looking to double its workforce in Japan and Europe, according to the SEC filing.

Deals looming on the horizon are also likely to aid the company. Sourcefire recently signed an OEM deal with Nokia for its security software and technology, and is now looking to expand its OEM alliances and distribution deals, according to the S-1: "We believe that we will generate an increasing amount of revenue from government suppliers such as Lockheed Martin, Northrop Grumman, and Immix Technology."

— James Rogers, Senior Editor Byte and Switch

  • Cisco Systems Inc. (Nasdaq: CSCO)
  • CommVault Systems Inc.
  • Isilon Systems Inc. (Nasdaq: ISLN)
  • Lockheed Martin Corp.
  • Nokia Corp. (NYSE: NOK)
  • Northrop Grumman Corp.
  • Securities and Exchange Commission (SEC)
  • Sourcefire Inc. (Nasdaq: FIRE)

    Comment  | 
    Print  | 
    More Insights
  • Comments
    Newest First  |  Oldest First  |  Threaded View
    COVID-19: Latest Security News & Commentary
    Dark Reading Staff 9/21/2020
    Hacking Yourself: Marie Moe and Pacemaker Security
    Gary McGraw Ph.D., Co-founder Berryville Institute of Machine Learning,  9/21/2020
    Startup Aims to Map and Track All the IT and Security Things
    Kelly Jackson Higgins, Executive Editor at Dark Reading,  9/22/2020
    Register for Dark Reading Newsletters
    White Papers
    Video
    Cartoon
    Current Issue
    Special Report: Computing's New Normal
    This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
    Flash Poll
    How IT Security Organizations are Attacking the Cybersecurity Problem
    How IT Security Organizations are Attacking the Cybersecurity Problem
    The COVID-19 pandemic turned the world -- and enterprise computing -- on end. Here's a look at how cybersecurity teams are retrenching their defense strategies, rebuilding their teams, and selecting new technologies to stop the oncoming rise of online attacks.
    Twitter Feed
    Dark Reading - Bug Report
    Bug Report
    Enterprise Vulnerabilities
    From DHS/US-CERT's National Vulnerability Database
    CVE-2020-25595
    PUBLISHED: 2020-09-23
    An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen's MSI handling have been identified that act on unsanitized values read back from device hardware registers. While devices strictly compliant with PCI specifications shouldn't be ...
    CVE-2020-5783
    PUBLISHED: 2020-09-23
    In IgniteNet HeliOS GLinq v2.2.1 r2961, the login functionality does not contain any CSRF protection mechanisms.
    CVE-2020-11031
    PUBLISHED: 2020-09-23
    In GLPI before version 9.5.0, the encryption algorithm used is insecure. The security of the data encrypted relies on the password used, if a user sets a weak/predictable password, an attacker could decrypt data. This is fixed in version 9.5.0 by using a more secure encryption library. The library c...
    CVE-2020-5781
    PUBLISHED: 2020-09-23
    In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file (/etc/config/luci) by the authenticator.htmlauth function. When modified with arbitrary javascript, this causes a denial-of-service condition for all other users.
    CVE-2020-5782
    PUBLISHED: 2020-09-23
    In IgniteNet HeliOS GLinq v2.2.1 r2961, if a user logs in and sets the ‘wan_type’ parameter, the wan interface for the device will become unreachable, which results in a denial of service condition for devices dependent on this connection.