ThreatLocker, which offers a zero-trust endpoint security tool for enterprises, raises a $100M Series C led by General Atlantic, and says it has 23,000 clients
Steven Burke / CRN :
Context & Ripple Effects
ThreatLocker's $100M Series C, led by General Atlantic, lands in a zero-trust funding wave: just months earlier, Banyan Security raised a $30M Series B on the strength of its zero-trust remote access client, and back in 2020 CrowdStrike paid roughly $96M to acquire Preempt Security, an early sign that the category was consolidation-worthy. The disclosed 23,000-client base is what distinguishes ThreatLocker from the funding pack — this is a scale round, not a bet on a product still searching for product-market fit.
The arc matters because it doesn't stop here: four years later ThreatLocker went back to market for a $190M Series F led by Elephant, explicitly to extend its platform toward AI-related risks — a trajectory that makes this 2022 round the inflection point where the company moved from category participant to category consolidator.
First-order effects
- General Atlantic's growth-stage capital gives ThreatLocker the balance sheet to scale its endpoint allowlisting tool beyond the 23,000 enterprise clients it already claims, pressuring smaller zero-trust rivals on distribution rather than features.
Second-order effects
- Competing zero-trust vendors like Banyan now face a rival with both a large installed base and deep pockets, pushing the category toward platform bundling — the path CrowdStrike already took by acquiring Preempt Security rather than building zero trust in-house.
Third-order effects
- If the funding pattern holds — Series C in 2022, a $190M Series F by 2026 — endpoint zero trust consolidates into a handful of heavily capitalized platforms, with later rounds funding expansion into adjacent threat surfaces like AI rather than the original endpoint problem.
The trend: Zero-trust endpoint security is consolidating around heavily capitalized platform vendors whose successive funding rounds fund expansion from endpoint allowlisting toward AI-era threat surfaces.