Kiteworks Due Diligence

Run due diligence on Kiteworks: check compliance and get alerts when suppliers change.

United States · www.kiteworks.com · 29 vendors

Kiteworks provides a Private Data Network platform that unifies, tracks, controls, and secures sensitive data exchanges across channels such as email, file sharing, and APIs. The company helps organizations manage risk, ensure regulatory compliance, and prevent data breaches.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 1 category; runs on 29 sub-vendors.

Insights

Last updated 2026-08-01 · revision 2

29 direct vendors, 229 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

15 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Evidence found

Evidence: https://www.kiteworks.com/platform/compliance/iso-compliance/, https://trust.kiteworks.com

NIS2 (source) — No public evidence

Evidence: https://www.kiteworks.com/platform/compliance/nis-2-compliance/, https://www.kiteworks.com/regulatory-compliance/nis-2-directive-what-does-it-mean-for-your-business/

FIPS 140-3 — Evidence found

Evidence: https://www.kiteworks.com/platform/compliance/fips-compliance/, https://www.kiteworks.com/

Financials

Three-year financials

Financial Resilience Score: 7/10

Kiteworks is a well-funded private cybersecurity company backed by top-tier private equity investors including Insight Partners, Sixth Street Growth, and Baring Private Equity Asia. The most concrete public financial signal is the August 2024 $456M minority growth investment at a valuation exceeding $1B, providing substantial cash runway and de-risking near-term liquidity. The company benefits from a sticky enterprise and government customer base of 3,800+ customers, with FedRAMP, FIPS 140-3, and IRAP certifications creating high switching costs and long-term subscription-style revenue streams. Regulatory tailwinds such as CMMC 2.0 in the US defense industrial base, EU NIS2/DORA, and rising AI data-governance requirements expand its addressable market. The broad product footprint spanning MFT, secure file sharing, secure email, DRM, forms, and AI-agent governance reduces single-product concentration risk. However, financial opacity is a significant concern—no public financials mean external assessment of margins, burn, leverage, and cash generation is not possible. Additionally, the reputational legacy from the 2020-2021 Accellion FTA breach, competitive intensity from Progress Software, Fortra, Box, Egnyte, Microsoft, and Proofpoint, and PE ownership dynamics requiring an eventual exit path all present risks.

Key strengths: $456M growth investment in August 2024 at >$1B valuation, Top-tier PE backing (Insight Partners, Sixth Street Growth, Baring PE Asia), 3,800+ enterprise customers with high switching costs, FedRAMP Authorized, FIPS 140-3 validated, IRAP compliant certifications, Regulatory tailwinds from CMMC 2.0, NIS2, DORA, and AI governance, Broad unified platform spanning MFT, file sharing, email, DRM, and AI governance, Strategic tuck-in acquisitions (Totemo 2022, Maytech 2023, 123Formbuilder 2024)

Risk factors: No public financial disclosures; opacity on margins, burn, and leverage, Reputational legacy from 2020-2021 Accellion FTA breach, Intense competition from Progress Software (MOVEit), Fortra (GoAnywhere), Box, Egnyte, Microsoft Purview, and Proofpoint, PE ownership dynamics requiring eventual exit (IPO, strategic sale, or secondary), Potential shift toward margin/EBITDA optimization ahead of transaction, Private-credit or PE-loaded balance sheets may carry meaningful leverage

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report