Noname's horizontal expansion and exit

Diving deeper into

Noname Security

Company Report
This has pushed pure-play vendors like Noname Security ($40M ARR in 2023) to expand horizontally through acquisitions and new product development
Analyzed 6 sources

Horizontal expansion was the only credible way for Noname to stay relevant as API security stopped being a standalone budget line and started getting bundled into broader cloud and application security platforms. Noname had real scale at $40M ARR in 2023, but larger vendors were already teaching buyers to expect one console that finds APIs, tests them in development, monitors traffic in production, and plugs into the rest of the security stack.

  • Noname started from a narrow but concrete workflow, it connects to cloud and on prem environments, builds an inventory of every API, spots broken auth and exposed data, and feeds fixes into existing security tools. That discovery layer naturally extends into governance, compliance, and developer testing products.
  • The competitive bar moved fast. Snyk used acquisitions like Probely and Helios to sell a broader developer security suite, while Wiz expanded from cloud scanning into code security and threat detection. In that context, a single feature vendor risked getting priced as add on functionality.
  • The market ultimately validated the bundle thesis. Akamai agreed in May 2024 to buy Noname for about $450M, then closed the deal in June 2024, folding Noname into a wider application and API security offering and using its sales channels to broaden distribution.

The next phase of API security belongs to vendors that cover the full API lifecycle, from developers writing specs to security teams blocking live attacks. That favors platforms that can turn API discovery into adjacent products and cross sell them through an existing enterprise security base, which is exactly where the market has been heading.