Gigamon

United States · www.gigamon.com · 16 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 16 sub-vendors.

Insights

Last updated 2026-08-15 · revision 1

16 direct vendors, 163 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Gigamon exhibits high migration readiness, primarily driven by its advanced and cloud-native internal tech stack. The company extensively utilizes Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform, and Kubernetes, alongside virtualization technologies like VMware and OpenStack. This indicates a strong existing multi-cloud and containerized environment, which significantly reduces the technical hurdles for further migration or modernization efforts. The company's own products, such as 'GigaVUE Cloud Suite' and 'Cloud-Native Visibility,' demonstrate deep expertise in managing and securing cloud environments, suggesting internal capabilities that directly support migration initiatives. Key technologies like 'Deep Observability,' 'Hybrid Cloud Security,' and 'AI-Powered Traffic Intelligence' further align with modern, agile infrastructure requirements. Challenges and opportunities for migration are primarily influenced by unknowns regarding specific regulatory environments, data residency requirements, and the company's financial capacity to fund large-scale migrations. While vendor lock-in risk is 'Unknown,' the geographic diversity of vendor HQs/owners (4 countries for 14 services) suggests a degree of distributed risk, though the exact number of distinct vendors is not specified, which could impact the complexity of vendor-related migration aspects. Overall, the technical foundation is exceptionally strong for migration.

Compliance

9 in-scope frameworks identified; showing 3.

CCPA — Partially Compliant

Gigamon is headquartered in Santa Clara, California, making CCPA directly applicable. Gigamon's Privacy Policy includes a dedicated 'Privacy Notice for California Residents' section (effective May 22, 2023) that addresses CCPA rights, categories of personal information collected, and consumer request procedures. The risk is Medium because: (1) Gigamon explicitly states it does not sell personal information under CCPA; (2) consumer rights mechanisms (email and phone) are provided; (3) however, the CCPA has been significantly expanded by CPRA (California Privacy Rights Act, effective January 1, 2023), which introduced new requirements including a dedicated Privacy Protection Agency, sensitive personal information rights, and data minimization obligations — full CPRA compliance status is not publicly confirmed; (4) enforcement by the California Privacy Protection Agency (CPPA) has increased since 2023.

Evidence: https://www.gigamon.com/privacy-policy.html, https://www.gigamon.com/cookie-policy.html

DORA (source) — Assessment Required

DORA (EU Regulation 2022/2554, applicable from January 17, 2025) applies to financial entities in the EU and their critical ICT third-party service providers. Gigamon has confirmed financial services customers (KBC Banking and Insurance, Corpay/FLEETCOR) and markets dedicated financial services solutions. If Gigamon's products are classified as 'critical ICT third-party services' by EU financial regulators (ESAs), Gigamon could be subject to direct DORA oversight including mandatory audits, incident reporting, and contractual requirements. The risk is Medium because: (1) Gigamon is a technology vendor, not a financial entity itself; (2) DORA's direct application to ICT vendors depends on whether they are designated 'critical' by the ESAs; (3) however, Gigamon's EU financial services customers will impose DORA-compliant contractual requirements on Gigamon as a supplier.

Evidence: https://www.gigamon.com/solutions/industry/financial-services.html, https://www.gigamon.com/content/dam/resource-library/english/user---support-documentation/data-processing-agreement.pdf, https://www.gigamon.com/contact-us/office-locations.html

Export Controls — Partially Compliant

Gigamon manufactures and sells network security hardware and software (GigaVUE appliances, network taps, TLS/SSL decryption, deep packet inspection tools) that are subject to US Export Administration Regulations (EAR) administered by the Bureau of Industry and Security (BIS). Some products may also be subject to ITAR if they have military/defense applications (confirmed DoD customer). Gigamon operates in China (Beijing and Shanghai offices), which is a high-risk jurisdiction for export controls given BIS Entity List restrictions and technology transfer concerns. The risk is High because: (1) network security/surveillance technology is a controlled category under EAR (ECCN classifications); (2) China operations create significant export control risk; (3) violations carry severe criminal and civil penalties; (4) Gigamon explicitly publishes an Export Compliance Policy, indicating awareness of these obligations.

Evidence: https://www.gigamon.com/content/dam/resource-library/english/user---support-documentation/ms-gigamon-export-compliance-policy.pdf, https://www.gigamon.com/legal.html, https://www.gigamon.com/contact-us/office-locations.html

Financials

Three-year financials

Financial Resilience Score: 7/10

Gigamon has been privately held since December 2017, first under Elliott Management's Evergreen Coast Capital (~$1.6B take-private) and since June 2024 under Siris Capital Group at a reported ~$2.0B+ valuation. The valuation uplift over the 2017-2024 hold period suggests meaningful franchise growth, and press reporting around the Siris transaction indicated ARR reportedly north of ~$400M with the company described as growing and profitable on an adjusted-EBITDA basis. However, no audited financials have been publicly disclosed since FY2016, limiting external visibility into leverage, covenants, and cash generation. The business benefits from a sticky enterprise/government installed base of 4,000+ customers, including 83 of the Fortune 100, all top 10 U.S. federal agencies, 9 of the top 10 mobile network operators, 8 of the top 10 healthcare providers, and 7 of the top 10 global banks. Category leadership is strong, with a cited ~51% market share of the deep-observability market (650 Group) and Frost & Sullivan's 2025 Company of the Year award in global network observability for cybersecurity. A 150+ patent portfolio and 20+ years of R&D create meaningful IP moats. Key risks include a likely leveraged PE capital structure (historically sub-investment-grade term-loan ratings), competitive pressure from cloud-native observability players (Datadog, Dynatrace, Cisco/Splunk, ExtraHop, Corelight) and hyperscaler-native tooling, continued exposure to slower-growth hardware/appliance revenue, and federal-government budget concentration risk. Overall, the company appears financially resilient but opaque to external counterparties.

Key strengths: 4,000+ customers including 83 of Fortune 100 and all top 10 U.S. federal agencies, Reported ~51% market share in deep-observability category, Reported ARR north of ~$400M at time of 2024 Siris transaction, Valuation uplift from ~$1.6B (2017) to ~$2.0B+ (2024) under PE ownership, 150+ patents and 20+ years of R&D create IP moats, Strong PE sponsor backing (Siris Capital, previously Elliott), Migration toward cloud/subscription model (GigaVUE Cloud Suite)

Risk factors: No audited financial disclosures since FY2016 privatization, Likely leveraged capital structure from consecutive PE take-privates, Competition from cloud-native observability players (Datadog, Dynatrace, Splunk), Hardware/appliance exposure in slower-growth data-center visibility segment, Federal-government budget/contract cycle concentration risk, Historically sub-investment-grade / B-category term-loan ratings

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report