Funding Will Extend Leadership of Automated Email Authentication Pioneer
Valimail, the world’s leader in automating email authentication, announced it has raised a $25 million round of funding to accelerate its global growth and expand its portfolio of trust-based anti-impersonation services. Valimail provides the only automated email trust platform. Many leading organizations, including Yelp, Uber, Fannie Mae, Manulife, WeWork, and others, use Valimail to stop fraud, brand abuse, and data theft.
The Series B investment is led by Tenaya Capital, with participation from existing venture investors Shasta Ventures, Flybridge Capital Partners, and Bloomberg Beta.
“Valimail was founded to bring trust to the world’s communications, starting with email. In a world of first-generation solutions with failure rates over 70 percent, we believed total automation was a necessary approach,” said Alexander García-Tobar, co-founder and CEO of Valimail.
Alexander added, “The past three years have proven our thesis that the market both needs and values automated authentication. Now we’re prepared to make our platform available worldwide.”
Impersonation-based email attacks are the #1 vector for cyber attacks of all kinds. Valimail’s Identity-Driven Email Anti-impersonation (IDEA)™ platform stops these attacks by automating implementation and ongoing management of email authentication. Leveraging open standards, such as SPF, DKIM, and DMARC, the platform ensures that unauthorized senders using an organization’s domains in email messages are automatically blocked globally.
“Valimail’s technology represents the perfect convergence of a huge need (stopping impersonation and restoring trust to email), a rapidly growing market, and a revolutionary technology led by an experienced, disciplined team,” said Brian Melton, MD at Tenaya Capital.
Brian added, “Valimail’s automation platform is a best-in-class solution that’s already found a substantial market and widespread recognition for its technical superiority. It will have wide application in the years to come,” he added.
A Growing Global Trend
Both the private and public sectors now recognize email authentication as critical in preventing so-called email “spoofing” or impersonation attacks. The Department of Homeland Security, for example, mandated in late 2017 that all federal agencies not only adopt email authentication based on DMARC but implement it fully to prevent such attacks.
Email authentication based on DMARC has hit an inflection point, although companies still struggle to implement it fully:
- DMARC is now supported by over 5 billion email inboxes worldwide. (Valimail’s Email Fraud Landscape, Q1 2018)
- More domain owners have published DMARC records in the past six months than in the five previous years combined. (DMARC.org)
- However, successful deployment is extremely challenging: An analysis of one million DNS records shows that regardless of company size or vertical, about 80 percent of DMARC implementations fail to achieve enforcement. (Valimail’s Email Fraud Landscape 2017)
- DMARC is recommended for all companies by the Federal Trade Commission, the Online Trust Alliance, the Global Cyber Alliance, and many other organizations.
Automation Guarantees the Benefits of Authentication
Gartner Inc. recommends that security and risk management leaders involved in fraud prevention should work with brand stakeholders to “Implement domain-level email authentication protocols (SPF, DKIM, and DMARC) as the strongest technical protection against exact-domain spoofing of domains owned or controlled by their enterprise.” [Gartner: “Fighting Phishing: Protect Your Brand,” November 2017, refreshed December 2017]
Most companies deploying DMARC don’t make it to enforcement, however. Valimail’s enforcement guarantee ensures that customers get the benefits of authentication quickly and effortlessly so they can stop impersonation attacks right away.
“After attempting email authentication with other solutions, I was amazed at the level of automation Valimail provides,” said JJ Agha, VP of information security at WeWork. JJ added, “It eliminates the need for two FTEs, so my staff can focus on other key priorities. I consider it a ‘set it and forget it’ solution for ensuring that our employees and executives can’t be impersonated and that our email is trusted.”