Microsoft confirms acquisition of cloud security firm Adallom, sources say for $250M
Microsoft Confirms Purchase Of Cloud Security Firm Adallom — Microsoft announced this morning that it purchased cloud security firm Adallom. According to sources familiar with the matter …
Context & Ripple Effects
The confirmation lands a month after reports that Microsoft was paying around $320M for the Israeli cloud security startup — sources now peg the price closer to $250M. The deal is Microsoft buying its way into cloud app security rather than building it, absorbing a specialist whose product later surfaced as Cloud App Security when it went generally available in 2016.
It also fits an established pattern for Microsoft's security M&A: two years later it bought Israel-based threat-detection firm Hexadite for a reported $100M, and by 2021 it had agreed to pay over $500M for SaaS security intelligence company RiskIQ — each deal bolting a specialist capability onto the Office/Azure enterprise stack.
First-order effects
- Adallom's team and technology move under Microsoft, and its standalone cloud security product effectively ceases to exist as an independent offering — customers now face migration onto Microsoft's stack.
- Microsoft gains visibility into third-party SaaS usage from inside its own tenant ecosystem, strengthening the security attach story for Office 365 and Azure sales.
Second-order effects
- Standalone cloud security vendors — CASB-era competitors and Israeli security startups alike — face a shrinking path as their largest prospective customer becomes a competitor that buys rather than partners.
- Rival cloud platforms are pushed toward equivalent acquisitions or native builds to match the bundled security pitch, turning cloud app security from a point product into a platform checkbox.
Third-order effects
- If the pattern holds, independent cloud-security specialists get absorbed into hyperscaler suites, concentrating enterprise security purchasing around a few platform vendors and raising consolidation risk for startups whose exit map runs through Redmond.
- Israel's cybersecurity startup pipeline keeps functioning as an R&D arm for US platform companies — a structural dependency where innovation happens outside but distribution and ownership consolidate inside the giants.
The trend: Microsoft is assembling its enterprise security stack through serial absorption of specialist vendors — Adallom, Hexadite, RiskIQ — converting a fragmented point-product market into bundled platform features.