Top Cybersecurity Companies in the USA: Who Leads Now

Leading cybersecurity companies headquartered in the USA include Palo Alto Networks (revenue about $11.5 billion in fiscal 2026), Fortinet ($6.80 billion in 2025), CrowdStrike ($4.81 billion in fiscal 2026), Zscaler, Okta and SentinelOne. McAfee and Norton owner Gen Digital are the best-known US-based consumer security brands.

Key Takeaways

• Seven of the ten companies profiled below are headquartered in the United States; Mimecast and Darktrace are British, and Kaspersky is Russian.
• Palo Alto Networks is the largest company on this list by revenue, at about $11.5 billion for the fiscal year ended July 31, 2026.
• Several famous names have changed hands: McAfee went private in March 2022, Symantec’s enterprise business belongs to Broadcom, and FireEye’s products became part of Trellix.
• Kaspersky software can no longer be sold in the US: sales were banned from July 20, 2024, and updates from September 29, 2024.
• Figures below are dated; company revenue and staff numbers change every quarter, so check the latest annual report before relying on them.

Note (September 2026): This list was compiled in May 2023 and was re-checked in September 2026 against company filings, company websites and Wikipedia summaries of their records. Since then, the US government has banned sales of Kaspersky software (from July 2024), McAfee’s enterprise business was sold in 2021 and became part of Trellix, and Symantec’s enterprise business has belonged to Broadcom since 2019. Mimecast and Darktrace are British companies. Several 2023 statements were wrong or out of date (Palo Alto Networks, Zscaler and Fortinet revenue, Zscaler’s founding year, staff counts, and descriptions of Symantec and Darktrace) and have been corrected in place.

Cybersecurity is a large and fast-consolidating part of the American technology industry. Businesses and people alike are looking to secure their systems and networks in light of the growing threat of cybercrime. Older household names have changed shape: FireEye’s products business became part of Trellix in 2022, its Mandiant unit was bought by Google in September 2022, and Symantec’s enterprise business has belonged to Broadcom since November 2019.

Cybersecurity Companies In USA – List of Top Cybersecurity Companies In USA

The market for cybersecurity innovation has exploded, increasing both the number of options available and the demand for strong security protection.

To help readers explore this market, the list below profiles well-known cybersecurity companies by history, products, size and recent revenue. It is an editorial selection, not a ranking based on independent product testing.

With well-known ransomware attacks, software supply-chain hacks and a wave of acquisitions, the industry is going through a time of high stakes and rapid change. Below are ten well-known cybersecurity companies. Seven are headquartered in the United States; Mimecast and Darktrace are British, and Kaspersky is Russian and barred from selling software in the US.

McAfee

Leading cybersecurity provider McAfee offers cloud-based and on-premise security products; since selling its enterprise business in July 2021, the San Jose, California-based company has focused on consumers. John McAfee founded the business in 1987 as McAfee Associates. It has been privately owned since March 1, 2022, when an investor group led by Advent International and Permira completed its acquisition.

Before July 2021, McAfee’s enterprise range covered endpoint security, identity and access management, risk and compliance programs, and threat prevention. That enterprise business was sold to Symphony Technology Group for $4 billion and combined with FireEye’s products business to form Trellix, launched in January 2022. McAfee’s current consumer products include McAfee+ (Premium, Advanced and Ultimate), McAfee Total Protection, McAfee LiveSafe and McAfee Safe Connect VPN. The mission of McAfee is to offer integrated, complete, and automated security solutions that safeguard the digital environment of customers and allow them to concentrate on key business practices.

Mimecast

Mimecast is a British email and collaboration security company, founded in 2003 by Peter Bauer and Neil Murray and headquartered in London. It says it protects more than 42,000 organizations and 27 million users worldwide (company website, September 2026). Mimecast’s North American headquarters is in Lexington, Massachusetts, and the company has been owned by private equity firm Permira since May 2022, when a $5.8 billion takeover was completed.

Mimecast builds tools to protect email and defend against malicious messages in users’ inboxes using AI and machine learning (ML) models; the older figure of 1.3 billion emails analyzed per day could not be re-verified. Mimecast describes its current mission as securing “humans, data and AI” across every communication channel. Mimecast is included here for its sizeable North American operations, but it is a UK-headquartered company, not a US one.

Palo Alto Networks

The headquarters of Palo Alto Networks, a leader in cybersecurity formed in 2005, is in Santa Clara, California. This corporation offers security solutions intended to stop cyberattacks that pose a threat to governments, key infrastructure, and enterprises all around the world. Palo Alto Networks was founded by Nir Zuk and Rajiv Batra, trades on Nasdaq as PANW and had 16,068 employees in 2025.

Palo Alto Networks’ revenue was $5.5 billion in fiscal 2022 (not $5.04 billion as this article previously said) and about $11.5 billion in fiscal 2026, which ended July 31, 2026. It offers endpoint security, cloud security and firewalls, among other products, and completed its $25 billion purchase of the identity-security company CyberArk in February 2026. Palo Alto Networks continues to set the bar for safe digital activities with a clear vision for the future of cybersecurity.

SentinelOne

Since its creation in 2013, SentinelOne has been a leader in cybersecurity, offering cutting-edge and efficient security solutions. The company, which has its headquarters in Mountain View, California, has grown significantly over the years and had about 2,800 employees in 2024. SentinelOne provides a wide range of products and services, such as endpoint detection, endpoint protection, and response, managed detection and response, cloud workload protection, IoT security and more. SentinelOne’s revenue was $204.8 million in fiscal 2022 and about $1.0 billion in fiscal 2026 (the year ended January 31, 2026).

SentinelOne was founded by Tomer Weingarten, Almog Cohen and Ehud Shamir, listed on the New York Stock Exchange (ticker S) in June 2021, and has grown partly through acquisitions such as Attivo Networks ($616.5 million, March 2022), PingSafe (January 2024) and Prompt Security (August 2025). SentinelOne is dedicated to assisting companies in defending themselves against constantly changing cyber threats and making sure they remain a step ahead of the competition.

ZScaler

The San Jose, California-based cloud security company Zscaler was founded in 2007 by Jay Chaudhry and K. Kailash. Zscaler had 7,348 employees in 2024 and serves a wide variety of businesses and organizations. Zscaler’s actual revenue was $1.09 billion in fiscal 2022 (below the $1.4 billion this article previously projected) and about $3.35 billion in fiscal 2026, which ended July 31, 2026.

A secure web gateway, cloud firewall, cloud access security broker, and other products are included in their product line. Zscaler’s solutions are highly sought after because they help secure their clients’ digital presence without sacrificing speed or performance in an era where cybersecurity dangers are rising across industries. Overall, Zscaler is a major participant in the tech sector thanks to its dedication to innovation and cybersecurity.

Okta

It might be terrifying to imagine having one’s identity stolen online. Okta, which bills itself as the world’s top identification platform, attempts to fight internet security problems including identity theft.

The Okta Integration Network lists more than 8,000 pre-built integrations (8,367 in September 2026), which organizations in industries such as energy, healthcare and financial services use to connect their applications to Okta. The services provided by Okta not only assist businesses in protecting their staff but also in securing the login and information of their customers. Okta was founded in January 2009 by Todd McKinnon and Frederic Kerrest, is headquartered in San Francisco, and reported revenue of $2.92 billion for the fiscal year ended January 31, 2026. Buyers should also weigh its incident history: a LAPSUS$ intrusion in March 2022, theft of source code from its GitHub repository in December 2022, and an October 2023 breach of its support system that, by November 29, 2023, Okta said affected all of its customers.

Darktrace

Being maliciously attacked by an online threat is one of the worst things that can happen to an online business. Darktrace’s platform uses unsupervised machine learning to learn a “pattern of life” for each network and device, flag unusual activity and respond automatically to threats.

In 2023, Darktrace marketed a product called Darktrace PREVENT, which analyzed an organization’s assets and used AI to tell familiar assets from unfamiliar ones. It also marketed Darktrace HEAL, designed to help organizations restore attacked assets to their prior state. As of September 2026, Darktrace’s website presents its products as the Darktrace Behavioral Defense Platform, with product lines named / EMAIL, / HYBRID NETWORK and / SECURE AI. Darktrace is a British company, founded in 2013 in Cambridge, UK, with offices including San Francisco. Private equity firm Thoma Bravo completed its $5.3 billion acquisition of Darktrace on October 1, 2024.

Symantec

Symantec Corporation, founded on March 1, 1982, in Sunnyvale, California, no longer exists as a single company. In November 2019, Broadcom, headquartered in Palo Alto, California, completed its $10.7 billion purchase of Symantec’s enterprise security business, which it still runs under the Symantec brand. The consumer business was renamed NortonLifeLock in November 2019 and, after merging with Avast in September 2022, became Gen Digital in November 2022.

Between them, Broadcom’s Symantec division (for companies) and Gen Digital (for consumers) sell products that safeguard identities, data and infrastructure from online threats such as malware, illegal access and cybercrime. Symantec contributes to the security, privacy, and safety of computers, networks, and digital information through its products and services.

Norton products now belong to Gen Digital, which is headquartered in Tempe, Arizona, and Prague, Czech Republic. Gen Digital also owns Avast, AVG, Avira, LifeLock and CCleaner, and reported revenue of about $5.0 billion for fiscal 2026.

Fortinet

Fortinet is a well-known provider of cutting-edge security solutions to companies and organizations all around the world. Founded in 2000 by Ken Xie and Michael Xie, Fortinet is headquartered in Sunnyvale, California, and had 14,138 employees in 2024. Fortinet’s actual revenue was $4.42 billion in 2022 (well above the $2.5 billion this article previously projected) and $6.80 billion in 2025.

Network security, endpoint security, cloud security, and security operations are just a few of the products and services that Fortinet offers. Its solutions are made to offer the best defense against quickly emerging cyber threats, freeing its clients from having to worry about security lapses and allowing them to concentrate on operating their businesses.

Kaspersky

Kaspersky was founded in Moscow in 1997 by Eugene Kaspersky, Natalya Kaspersky, Alexey De-Monderik and Vadim Bogdanov, and it is still headquartered in Moscow, Russia, so it is not a US company. Kaspersky sells security products to consumers, organizations and governments in many countries, but no longer in the United States: the US Commerce Department banned sales of Kaspersky software from July 20, 2024, and software updates from September 29, 2024, and Kaspersky announced it would leave the US market. In September 2024, Kaspersky replaced its software on US users’ computers with UltraAV, a product developed by Pango. The tools made by Kaspersky identify and defend against internet dangers like viruses, spyware, malware, and ransomware.

Kaspersky also creates products that aid in protecting data and devices from hackers. Kaspersky concentrates on creating and implementing state-of-the-art technology to counter evolving cyber threats. Internet security, endpoint security, mobile security, and managed security services are all part of Kaspersky’s solution offering.

Which Cybersecurity Companies on This List Are US-Based?

Seven of the ten companies profiled above are headquartered in the United States. The table shows each company’s headquarters, ownership and one dated figure for scale, as of September 2026.

Fiscal years differ: Palo Alto Networks and Zscaler close their year on July 31, Okta and SentinelOne on January 31, and Fortinet on December 31, so revenue figures are not for identical periods.

What Has Changed Since This List Was First Published?

The US cybersecurity industry has consolidated sharply since 2021. The main changes affecting the companies named in this article are:

• FireEye sold its products business to Symphony Technology Group for $1.2 billion in June 2021. Those products were combined with McAfee Enterprise to launch Trellix, headquartered in Milpitas, California, in January 2022. FireEye’s Mandiant unit was acquired by Google for $5.4 billion in a deal that closed on September 12, 2022, and is now part of Google Cloud.
• McAfee sold its enterprise business in July 2021 and was taken private by an Advent International and Permira-led group on March 1, 2022.
• Mimecast was acquired by Permira for $5.8 billion in May 2022.
• Kaspersky was banned from US federal agencies in September 2017 and from US sales from July 20, 2024.
• Darktrace was taken private by Thoma Bravo for $5.3 billion on October 1, 2024.
• Palo Alto Networks completed its $25 billion acquisition of CyberArk in February 2026 and its $3.35 billion acquisition of Chronosphere in January 2026.
• Cisco, headquartered in San Jose, California, completed its $28 billion acquisition of Splunk on March 18, 2024.

Other Major US Cybersecurity Companies

The original 2023 list left out several large US security companies. They are worth knowing when comparing providers.

CrowdStrike

CrowdStrike is a cybersecurity company founded in 2011 by George Kurtz, Dmitri Alperovitch and Gregg Marston. CrowdStrike is headquartered in Austin, Texas, reported revenue of $4.81 billion for the fiscal year ended January 31, 2026, and had 10,698 employees in 2026. On July 19, 2024, a faulty CrowdStrike software update caused global computer outages affecting about 8.5 million Windows computers, disrupting airlines, healthcare, banking and broadcasting.

Trellix

Trellix is the extended detection and response (XDR) company formed by Symphony Technology Group from McAfee Enterprise and FireEye’s products business. Trellix is headquartered in Milpitas, California, and is owned by Symphony Technology Group. McAfee Enterprise’s security service edge business operates as a separate company, Skyhigh Security; the article on real-world applications of security service edge (SSE) explains what that category covers.

Cisco and Google

Some of the largest US security businesses sit inside bigger technology groups. Cisco added Splunk in 2024, and Google owns Mandiant through Google Cloud. Their security revenue is not reported the same way as that of stand-alone security companies, so they are not compared by revenue here.

How to Choose a Cybersecurity Company

Choosing a cybersecurity provider is mainly about matching the product to the risk. These steps help narrow the field:

1. Define the problem first. Endpoint protection (CrowdStrike, SentinelOne), network firewalls (Palo Alto Networks, Fortinet), cloud security gateways (Zscaler), identity (Okta) and email security (Mimecast) are different categories.
2. Check who owns the vendor. Private-equity ownership, mergers and rebrands can change product roadmaps and support, as the McAfee, FireEye and Symantec histories show.
3. Check where the vendor is based. US federal agencies face restrictions on some foreign software; Kaspersky is the clearest example.
4. Review the incident history. Public breach disclosures, such as Okta’s 2022 and 2023 incidents, and outages, such as CrowdStrike’s July 2024 faulty update, show how a vendor handles problems.
5. Cover the basics too. No vendor replaces staff training against spear phishing scams, sound network security essentials, controls that limit lateral movement in cyber attacks, and strong unique passwords from a tool such as the secure password generator.

For readers interested in working at these companies rather than buying from them, the guide on how to get a job in information security covers the main entry routes.

Frequently Asked Questions

Which is the biggest cybersecurity company in the USA?

Palo Alto Networks is the largest stand-alone cybersecurity company covered here, with revenue of about $11.5 billion in the fiscal year ended July 31, 2026. Fortinet ($6.80 billion in 2025) and CrowdStrike ($4.81 billion in fiscal 2026) follow.

Is Kaspersky banned in the United States?

Yes. The US Commerce Department banned sales of Kaspersky software from July 20, 2024, and software updates from September 29, 2024. US federal agencies had already been barred from using and buying Kaspersky software since September 2017.

Who owns Symantec and Norton now?

Broadcom owns Symantec’s enterprise security business, which it bought for $10.7 billion in November 2019. Norton belongs to Gen Digital, the former NortonLifeLock, headquartered in Tempe, Arizona, and Prague.

What happened to FireEye?

FireEye no longer exists under that name. Its products business was sold to Symphony Technology Group in 2021 and became part of Trellix in January 2022, and its Mandiant unit was acquired by Google in September 2022.

Is Darktrace an American company?

No. Darktrace was founded in 2013 in Cambridge, UK, and is headquartered there. Private equity firm Thoma Bravo completed its $5.3 billion acquisition of Darktrace on October 1, 2024.

Is McAfee still a public company?

No. McAfee has been privately owned since March 1, 2022, when an investor group led by Advent International and Permira completed its acquisition. McAfee has focused on its consumer business since selling its enterprise business in July 2021.

Powered by