Adallom
Adallom, founded in 2012 in Tel Aviv, pioneered cloud access security broker (CASB) technology to provide enterprise visibility and control over SaaS application usage, user behavior, and cloud data exposure. The company was acquired by Microsoft in 2015 and its capabilities were integrated into what became Microsoft Defender for Cloud Apps.
Visit WebsiteCompany Overview
Adallom developed a Cloud Access Security Broker (CASB) platform that became a reference architecture for controlling enterprise SaaS environments. The core innovation was real-time monitoring and policy enforcement across shadow IT—identifying when users accessed unauthorized or risky cloud applications, detecting abnormal behaviors (impossible travel, credential anomalies, data exfiltration patterns), and enforcing contextual access controls based on user role, device posture, and location. The platform provided organizations with visibility into data flows across hundreds of SaaS applications and enforced data loss prevention (DLP) controls to prevent accidental or malicious exposure of sensitive information.
Adallom was founded by a veteran Israeli security team during the inflection point (2010–2015) when enterprise SaaS adoption was accelerating but security governance remained ad-hoc. The company raised multiple rounds of venture funding, validating the market need for CASB technology as a category. By 2015, Adallom had proven strong product-market fit, with enterprise customers across regulated sectors and demonstrated recurring revenue, positioning it as a category leader. Microsoft's acquisition of Adallom in 2015 reflected Microsoft's strategy to integrate cloud security into its broader enterprise security and compliance stack, alongside Azure AD and Office 365.
The technology's strategic value lies in its foundational approach to enterprise cloud governance. Adallom's visibility and policy architecture influenced industry standards for CASB functionality and became a template for how organizations should monitor and control cloud application access. The company's customer base and use cases informed best practices in regulated industries (financial services, healthcare, government) where cloud adoption required demonstrable security controls and compliance oversight.
After acquisition, Adallom's technology was integrated into Microsoft Defender for Cloud Apps (formerly Microsoft Cloud App Security), which became the centerpiece of Microsoft's cloud security platform. This integration expanded the addressable market from specialized CASB vendors to Microsoft's large enterprise customer base, amplifying the impact of Adallom's foundational architecture across hundreds of thousands of organizations.
From a dual-use and national-security perspective, cloud access governance and visibility are strategic capabilities for defense, intelligence, and government organizations managing classified or sensitive workloads in commercial cloud environments. Adallom's CASB architecture directly addresses the challenge of enforcing security controls and compliance across distributed cloud services—a capability that becomes more critical as defense organizations embrace cloud infrastructure for operational advantage while protecting sensitive data from insider threats, compromised credentials, and advanced persistent threats. The ability to detect anomalous cloud access patterns and enforce fine-grained policy controls has direct relevance to intelligence and military operations managing cloud-hosted mission systems.
Dual-Use Assessment
Adallom's cloud access governance technology has substantive dual-use applicability. The core CASB capabilities—real-time monitoring of cloud application access, anomaly detection for compromised credentials and impossible-travel scenarios, and fine-grained policy enforcement—are equally critical for commercial enterprises and defense/intelligence organizations securing classified or sensitive workloads in commercial cloud environments. Defense organizations increasingly rely on commercial cloud infrastructure (AWS GovCloud, Azure Government) and require visibility and control equivalent to on-premises systems. Adallom's policy-based access control and behavioral analytics directly address the insider-threat and advanced-persistent-threat detection challenges that defense and intelligence agencies face when moving operations to cloud. The technology's data loss prevention capabilities are also relevant for protecting classified or sensitive intelligence information across cloud services. Post-acquisition, these capabilities were retained and enhanced within the Microsoft Defender for Cloud Apps platform, which serves both commercial enterprises and government customers with security clearances through Microsoft's Government Cloud offerings.
Strategic Fit Assessment
Adallom is not currently investible as a standalone company: it was acquired by Microsoft in 2015 and fully integrated into Microsoft Defender for Cloud Apps. As an acquired entity, it no longer exists as an independent investment vehicle. However, the investment thesis at the time of Adallom's venture funding and exit was compelling: the company operated in an emerging, high-growth security market (CASB was a nascent category in 2012–2015), demonstrated clear product-market fit with enterprise customers in regulated sectors, achieved recurring revenue with multi-year contracts, and was acquired by a strategic acquirer (Microsoft) at a premium valuation as part of Microsoft's cloud security consolidation strategy. For historical-analysis purposes, Adallom exemplifies successful venture-backed security software outcomes in the cloud-security category, with strong technology differentiation, experienced Israeli security founders, and timely market entry preceding major category maturation.
Strategic Value to U.S.-Israel Alliance
Adallom's strategic value lies in its foundational contribution to cloud security governance architecture and its validation of the CASB category as essential infrastructure for enterprise and defense cloud adoption. The company's innovation in real-time cloud-access visibility, anomaly detection, and policy enforcement became the reference design for how organizations should control and monitor SaaS and cloud-application environments. Post-acquisition, this technology has been deployed at scale across Microsoft's customer base, including government and defense organizations using Microsoft's Government Cloud offerings. The strategic relevance to defense and allied operations is high: as military, intelligence, and defense organizations migrate sensitive workloads to commercial cloud platforms, Adallom's CASB architecture directly addresses the governance and threat-detection requirements for securing cloud-hosted classified information and operational systems. The technology's integration into Microsoft's platform ensures that U.S. defense customers have access to cloud-security capabilities purpose-built for insider-threat detection, credential-compromise identification, and data-exfiltration prevention in cloud environments. For strategic planning, Adallom demonstrates the market viability of cloud-security infrastructure and the value of early-mover advantage in emerging security categories.
Key Technologies
- Cloud Access Security Broker (CASB) architecture
- Real-time SaaS application discovery and monitoring
- User behavior analytics for cloud threats (impossible travel, credential anomalies)
- Cloud data loss prevention (DLP) with policy enforcement
- Cloud-application risk scoring and shadow-IT detection
- Policy-based access control with contextual enforcement
Use Cases & Applications
- Shadow-IT detection and risk assessment in enterprise environments
- Data loss prevention across cloud applications (SaaS, IaaS)
- Insider-threat detection via impossible-travel and behavioral anomalies
- Compliance enforcement in regulated sectors (financial, healthcare, government)
- Credential compromise and account-takeover detection in cloud
- Policy-based access control for cloud applications and data
- Cloud security posture monitoring and incident response
- Defense and intelligence organization cloud-workload protection
Need a diligence readout?
Get in touch to discuss dual-use technology screening, government-market assessment, or strategic diligence.