The triple whammy of Sept. 11, corporate financial scandals, and the explosion of such Internet crimes as phishing and spoofing have created a huge need for, and opportunity to make money in, security and compliance solutions. "That's where enterprises have had sizable budgets," notes Robin Vasan, managing director of the VC firm Mayfield Fund. No surprise, then, that four of the 15 startups we selected focus on security concerns.
"Security breaches and regulators have companies looking in all different directions to reduce risk," says Richard Gincel, associate editor at InfoWorld. "Startups that target the source-code level are going after another layer of vulnerability. Fortify, for example, automates security at the dev cycle." Meanwhile, our picks ConSentry and Sxip focus on authentication and identity, while Determina plumbs application behavior to identify hack attacks.
Other factors have driven investments virtualization and datacenter management. Many organizations have consolidated their datacenters to save IT overhead costs during lean years and are looking to virtualization, policy-based automation, and remote monitoring and control to leverage what they've got. "I see software virtualization and operating system virtualization as very intriguing [investment] areas," Mayfield's Vasan says. Two companies described here, Fabric7 and Xenprise, provide system virtualization solutions, whereas Gigamon provides a way to manage traffic to monitoring tools, whether deployed as appliances or as applications.
Regardless of specific technologies, the open source movement is commanding a lot of VC attention. Fundamentally, commercial open source startups are not about creating new technology per se, but about putting a management and services structure around existing technology developed through open source efforts.
Some VCs see commercial open source as a quick way to enter markets formerly dominated by established vendors -- such as XenSource, which competes with virtualization solutions from Microsoft and VMware. Others aren't so sure that the commercial open source model is a clear win, chalking up early successes such as JBoss and SugarCRM to a void in the market that the vendor happened to fill. "I question the economic advantage of the commercial open source model," says Eric O'Brien, general partner at VC firm Lightspeed Venture Partners.