Cybersecurity company Veracode files for IPO, plans to go public in May
Exclusive: Veracode files for IPO — Cybersecurity company Veracode is planning to go public in May, Fortune has learned. — The Burlington, Mass.-based company already has filed confidential IPO documents with the SEC …
Context & Ripple Effects
Veracode's confidential SEC filing puts it in a line of security companies testing the public markets through the same quiet route: Blue Coat was expected to make its IPO filing public within days in 2016, and Optiv followed with a $100M IPO filing that November. What distinguishes Veracode's arc is how it ends — rather than completing a listing, the company was absorbed into a larger buyer via CA Technologies' $614M cash acquisition in 2017.
The filing matters because it marks an early instance of what became the sector's default playbook: Zscaler later confidentially filed ahead of a year-end debut, and Netskope's 2025 filing with disclosed revenue shows the same confidential-to-public sequence still running a decade on.
First-order effects
- Veracode gains access to public-market capital and, once its filing goes public, must disclose financials that rivals and customers can scrutinize.
Second-order effects
- The confidential-filing template Veracode used becomes the visible path for peers — Zscaler repeats it almost exactly two years later — while the CA Technologies acquisition shows large software buyers willing to outbid the IPO window outright.
Third-order effects
- If the pattern holds, cybersecurity consolidates around a two-track exit: independent listings for scaled cloud-security vendors like Zscaler and Netskope, and absorption into enterprise software platforms for application-security specialists like Veracode.
The trend: Cybersecurity exits are cycling between confidential IPO filings and strategic acquisitions by larger software buyers, with market conditions deciding which track each specialist takes.