Anomali

Content sourced from Wikipedia, licensed under CC BY-SA 3.0.

Anomali Inc. is an American cybersecurity company that creates threat intelligence and security analytics products. Based in Redwood City, California, it was founded in 2013 as ThreatStream by Greg Martin and Colby DeRodeff and rebranded to Anomali in 2016. In 2023, the company began offering AI-powered security analytics.

Its main products are ThreatStream (a threat intelligence platform), Anomali Match (enterprise threat detection), Anomali Lens (a web browser extension that highlights relevant threat data), and Security Analytics. Anomali provides both cloud-based SaaS and on‑premise options, and can ingest an organization’s logs to help detect indicators of compromise.

By 2018, Anomali had raised about $96 million from investors such as Paladin Capital, Institutional Venture Partners, GV (Google Ventures), General Catalyst, Telstra Ventures, and Lumina Capital. The company works with government and large businesses, including the Bank of England, Citigroup, and Alaska Airlines, and has built an ecosystem of partners and an App Store for third-party tools. It also collaborates with Microsoft to integrate ThreatStream data with Microsoft Graph security insights and has partnered with NH-ISAC to support healthcare organizations.

In March 2022, Anomali released Cloud-Native XDR to strengthen security across networks and cloud services and launched the Resilience Partner Program for global system integrators, value-added resellers, distributors, and service providers.

The company has a history of cyber threat research, including exposing Australian phishing schemes in 2019, the eCh0raix ransomware targeting QNAP devices in 2019, and Gamaredon attacks on Ukrainian government and media targets in 2019. It has also tracked campaigns in 2020–2021 involving mobile apps masquerading as COVID-19 tracers, and campaigns against UAE and Kuwait government agencies in 2021, among other activities.