Cloudflare acquires stealthy startup S2 Systems as part of its new Cloudflare for Teams product suite, designed to protect an organization from internet threats
Cloudflare announced that it has acquired S2 Systems, a browser isolation startup started by former Microsoft execs.
Context & Ripple Effects
Cloudflare is buying capability rather than building it: S2 Systems, a stealthy browser isolation startup founded by former Microsoft execs, becomes the security core of the new Cloudflare for Teams suite. It follows the same playbook as Cloudflare's earlier Eager acquisition, where a small team was absorbed and its standalone service wound down.
Browser isolation is not an unproven bet — Symantec paid for the same technology when it bought Fireglass in 2017 — and CDN peers have made parallel moves, with Akamai buying Soha Systems to bolt security onto cloud networking. The pattern held: five years later Cloudflare was still buying specialists into the suite with the $162M Area 1 Security deal.
First-order effects
- S2 Systems' former-Microsoft-exec founding team joins Cloudflare, and its browser isolation technology ships inside Cloudflare for Teams rather than as a standalone product.
Second-order effects
- Symantec's Fireglass purchase means Cloudflare enters browser isolation against an incumbent that validated the category first, pushing both toward bundling isolation into broader enterprise security suites instead of selling it alone.
- Rival edge networks like Akamai, which bought Soha Systems for the same reason, face pressure to keep acquiring security specialists or cede the 'network plus protection' bundle to Cloudflare.
Third-order effects
- If the pattern holds, security point solutions — isolation, email protection, misconfiguration prevention — get absorbed by infrastructure platforms, leaving standalone specialists with fewer exit paths than full-suite buyers like CrowdStrike, which later paid ~$300M for Adaptive Shield.
The trend: Edge and CDN infrastructure vendors are consolidating security specialists into integrated zero-trust suites, turning acquisitions like S2 Systems into the standard route from network provider to security platform.