ThreatLocker

ThreatLocker sells Zero Trust endpoint security software built on allowlisting, which blocks any software that has not been explicitly approved. The company describes its mission as moving cybersecurity from a "default allow" model, where everything is permitted unless blocked, to a "default deny" model, where all actions are blocked by default and only approved activity is allowed.^[1]

ThreatLocker said in its July 2026 funding announcement that it protects over 70,000 organizations worldwide. CRN reported that the company has more than 70,000 customers in addition to working with several thousand managed service providers (MSPs).^[2],[3]

ThreatLocker's own timeline lists Allowlisting (launched 2017), Storage Control (2019), Elevation Control (2020), Network Control (2021), Detect, an endpoint detection and response (EDR) product (2023), and Cyber Hero MDR, a managed detection and response service (2024). In 2025 ThreatLocker added Web Control, Patch Management, Insights, Use Store and Cloud Control, and at its 2026 Zero Trust World conference it announced Zero Trust Network Access and Zero Trust Cloud Access.^[1]

ThreatLocker also positions its controls for AI-driven activity. In the July 2026 announcement, the company said Allowlisting prevents unauthorized AI tools and code that AI tools generate from executing, while Ringfencing controls what approved applications and AI agents can access, modify and interact with.^[2]

ThreatLocker was incorporated in 2017 by Danny Jenkins, Sami Jenkins and John Carolan, who launched Allowlisting the same year. According to the company's about page, Danny Jenkins began his cybersecurity career in 1997, and ThreatLocker signed its first enterprise customer, in Florida, in 2018. In 2020 the company opened data centers in Florida and Virginia.^[1]

ThreatLocker had 27 employees in 2021, when it hosted its first Zero Trust World conference, opened an office and data center in Dublin and launched Network Control. In 2022 ThreatLocker hired its 100th employee and acquired Thirdwall and HyperCube. By 2023 the company had grown to more than 200 team members and had extended its data center network to Sydney and Dubai. The sources reviewed give no terms for the two acquisitions.^[1]

ThreatLocker's about page says the team grew to over 600 people in 2025, with members across more than 10 countries. In 2024 Jenkins told CRN that ThreatLocker had about 400 employees and expected to add 500 to 700 over the following three years. BankInfoSecurity reported in 2026 that ThreatLocker employs 730 people. The Series F announcement said ThreatLocker had added offices in Brisbane and Dubai over the previous 18 months, alongside established operations in Orlando and Dublin, and that a U.K. office would open.^{[1],[4],[5],[2]}

ThreatLocker announced a $190 million Series F on July 29, 2026, led by Elephant, with continued support from D. E. Shaw Ventures and Arthur Ventures and a significant new investment from Koch Disruptive Technologies. The announcement was datelined Orlando.^[2]

ThreatLocker did not disclose a valuation for the Series F. CRN reported that the company told it the valuation "significantly grew" compared with a prior $1.6 billion valuation. BankInfoSecurity, however, reported that ThreatLocker closed a $60 million Series E in April 2025 at a $1.2 billion valuation. The two reports differ and this profile does not reconcile them.^[3],[5]

BankInfoSecurity reported that ThreatLocker has raised $490 million in six rounds of outside funding. The Series F announcement named BofA Securities as exclusive placement agent and Latham & Watkins as legal counsel.^[5],[2]

Earlier rounds were led by General Atlantic. BankInfoSecurity reported that ThreatLocker completed a $100 million Series C in April 2022, and CRN reported that round as led by General Atlantic with participation from Elephant VC and Arthur Ventures. A $115 million Series D, announced in 2024, was led by existing investor General Atlantic with participation from StepStone Group and the D.E. Shaw group, and BankInfoSecurity reported that ThreatLocker did not disclose a valuation for it. The sources reviewed do not give details of the Series A and Series B rounds.^[6],[7],[8]

In April 2024 BankInfoSecurity reported that ThreatLocker had been preparing for a possible initial public offering by strengthening internal processes and completing audits, according to Jenkins. Jenkins said he wanted to see the company double its topline sales before going public.^[6]

ThreatLocker's chief executive and co-founder is Danny Jenkins, according to the company's July 2026 funding announcement. The company's about page names Danny Jenkins, Sami Jenkins and John Carolan as co-founders; it does not state titles for Sami Jenkins or John Carolan.^[2],[1]

BankInfoSecurity reported that ThreatLocker has been led by Jenkins since its establishment, and that he had previously been CEO of white-labeled email security provider Sirrustec and co-founder of email and internet security SaaS provider MXSweep. The about page says Jenkins was moved to build a proactive Zero Trust product after seeing the aftermath of a severe phishing attack on a business.^[5],[1]

ThreatLocker works with managed service providers (MSPs), and CRN described the company in its Series C coverage as adding MSPs at a record-setting pace. In that report ThreatLocker said it provided its software to 23,000 businesses, including large enterprises such as JetBlue Airways.^[7]

Koch Disruptive Technologies, a Series F investor, said it would use its partner community, industry knowledge and Koch Labs capabilities to work with the ThreatLocker team as the company grows.^[2]