成立时间 01
1999 [CO001] 尽调报告
Kiteworks
Kiteworks 截至 2026-09-24 的月度跟踪更新
Kiteworks 有战略价值、资金也充裕，但财务质量仍不透明，难以支撑高确信度投资。
覆盖范围与披露说明
本次更新仅采用公开与第三方来源；经审计的财务数据、留存率和股权结构表细节均未披露，财务指标依赖预估与已披露的融资数据。
封面要素
公司概况
Kiteworks 属于后期非上市网络安全企业，专注受治理的安全数据交换。公司对外销售私有内容/数据网络，把电子邮件、文件共享、托管文件传输（MFT）、API、安全表单以及 AI 智能体访问，统一纳入同一套面向受监管企业与政府买家的策略、审计和加密模型。
- 成立时间
- 1999-01-01
- 创立地点
- Singapore
- 总部
- San Mateo, California, United States
- 产品
- 安全内容通信、安全文件共享、托管文件传输以及受 AI 治理的私有数据交换。
- 客户
- 受监管企业、公共部门、法律、金融服务、医疗健康以及安全敏感型机构。
- 商业模式
- 面向安全数据交换、合规与治理的企业级软件订阅与专业服务。
- 阶段
- Late-stage private
- 融资情况
- 2024 年 8 月融资 $456M；公开数据厂商估计累计融资约 $592M-$650M。
执行摘要
主要优势
- 统一平台治理多种数据交换渠道，并覆盖 AI 智能体访问
- 在受监管行业与公共部门定位鲜明
- 后期融资基础雄厚，合作伙伴生态可信
主要风险
- 经审计财务与客户留存指标不透明
- 历史泄露事件留下声誉包袱，信任仍需持续证明
- 专业竞品带来价格与产品复杂度压力
未决问题
- 经审计的收入、利润率、现金流和 NRR 均未披露。
- 客户集中度与留存队列数据仍未公开。
- FedRAMP High ATO 时间表、定价和模块经济性仍不清楚。
目录
01公司概况
1.1 业务定位与业务版图
Kiteworks 更适合被视为一家面向企业和公共部门的后期私营安全内容平台。官网将其描述为私有内容 / 数据网络，覆盖电子邮件、文件共享、托管文件传输（MFT）、API、表单和 AI 智能体访问。公开资料一致显示，公司总部位于 San Mateo，创立于 1999 年。悠久经营历史意味着平台可能积累了稳固的存量客户基础；但公司仍未上市，许多运营指标只能估算，无法从公开披露中核实。企业客户基础、受监管行业的合规定位，以及从核心交换渠道延伸至 AI 智能体治理的产品范围，共同支撑其业务叙事。[CO001, CO002, CO003]
| 指标 | 数值 / 状态 | 日期 | 确信度 | 证据缺口 |
|---|---|---|---|---|
| 成立时间 | 1999 / 源自 Accellion 时期 | 1999 | 高 | 创始人身份未完全公开 |
| 总部所在地 | 加利福尼亚州圣马特奥（San Mateo, California） | 2026-09-24 | 高 | 无 |
| 最近融资 | $456M 成长股权融资 | 2024-08-14 | 高 | 股权结构表分配顺序未公开 |
| 估值 | 投后估值约 $1B | 2024-08-14 | 高 | 估值推测分歧依然存在 |
| 客户数 | 3,800+ 家企业客户 | 2026-09-24 | 高 | 确切集中度未公开 |
| 员工数 | ~332-384 名员工（第三方厂商预估） | 2026-09-24 | 中 | 确切员工数未公开 |
公开的公司、融资及规模基准；部分数值为第三方预估，而非经审计的数据。
[CO001, CO003, CO004, CO005, CO006]1.2 融资、估值与体量
本次更新确认，Kiteworks 仍有充足的后期融资支撑：2024 年 8 月融资 $456 million，外部估值普遍落在 $1 billion 左右。第三方数据机构对累计融资额和收入规模说法不一，这本身就是尽调信号。投资上，Kiteworks 的融资体量已达独角兽级别，但财务披露仍然有限。融资和估值足以确认其独角兽身份；缺少经审计的利润率、收入和留存数据，经营状况仍主要靠估算判断。[CO004, CO005, CO006, CO011, CO012]
| 人员 | 职务 | 背景 | 创始人与市场契合度 / 职能覆盖 | 关键人依赖度 |
|---|---|---|---|---|
| Jonathan Yaron | 首席执行官兼董事长 | 2024 年融资公告中主要公开露面的核心代表 | 战略 / 合规治理 / 投资者关系覆盖 | 高 |
| David Byrnes | 全球渠道副总裁 | 主导 2026 年启动的渠道优先计划 | 合作伙伴生态 / 分销商覆盖 | 中 |
| Tim Freestone | 首席战略官 | Bonfy 整合公告中的对外发言人 | 产品战略 / AI 治理叙事 | 中 |
| Amit Toren | 首席商务官 | Bonfy 收购公告中的对外发言人 | 商业化执行 / 大客户销售覆盖 | 中 |
本次跟踪在当前公开资料中未能明确辨识最初的创始人；因此本表聚焦于公开可见的高管团队及其职能覆盖。
[CO004, CO008, CO009, CO012]1.3 治理、信任与近期里程碑
Kiteworks 在 2025—2026 年的动作都指向三件事：赢得受监管行业信任、借渠道伙伴拓展分销，以及讲述更广泛的主权协作故事。FedRAMP、FIPS、IRAP、公开安全公告库、ownCloud OSPO 和渠道优先认证计划，都在强化这一定位。历史泄露事件留下的声誉包袱，加上经审计运营指标的缺失，仍在平台扩张之际压低投资确信度。尽调不能只看产品：治理、渠道打法和历史安全事件都影响公司能否赢得并守住客户信任。[CO007, CO008, CO009, CO010]
| 利益相关方 | 角色 | 控制权或经济重要性 | 尽调诉求 |
|---|---|---|---|
| Insight Partners | 成长型投资方 / 董事席位 | 核心赞助方及董事会影响力 | 确认公司治理权及退出时间表 |
| Sixth Street Growth | 成长型投资方 / 董事席位 | 核心赞助方及董事会影响力 | 确认清算优先权及退出时间表 |
| Bregal Sagemount | 前期机构投资者 | 据报道已在 2024 年老股变现中退出 | 确认剩余权益及老股交易所得 |
| 管理层 | 实际经营控制权 | 推进产品与市场拓展（GTM）战略 | 确认股权激励及核心人员留存风险 |
| 渠道合作伙伴 | 分销杠杆效应 | 对伙伴驱动的规模化扩张至关重要 | 评估渠道分成比例及合作伙伴流失率 |
利益相关方角色均推断自公开公告与渠道伙伴资料；除 2024 年融资轮次外，其他财务与经济条款均未公开。
[CO004, CO005, CO008, CO009]按时间梳理创立、融资、合规、伙伴合作和并购节点，呈现 Kiteworks 本轮更新关注的关键进展。
以 Accellion 之名创立 [CO001]
与 Zivver 达成合作并拓展欧洲市场 [CO009]
渠道优先的认证计划 [CO008]
推进 FedRAMP High 认证 [CO007]
收购 Bonfy.AI [CO010]
02市场分析
2.1 市场边界与替代方案
Kiteworks 面向的是受治理的敏感数据交换市场，不只是安全文件共享。其业务覆盖电子邮件、MFT、API、网页表单、SFTP、协作，并逐步延伸至 AI 智能体访问。真正的替代方案不是某一家竞品，而是 SharePoint、传统 MFT、邮件附件、消费级文件共享和企业内部拼凑的合规流程。因此，本次更新将 Kiteworks 视为受监管数据流动的控制平面厂商。市场判断取决于工具碎片化、监管压力和 AI 治理需求上升。买家不是以一换一，而是想用统一策略层替代一整套功能重叠的管控工具。[CM001, CM002, CM003, CM004]
| 边界维度 | 包含 / 排除的支出 | 关键考量 |
|---|---|---|
| 包含范畴 | 邮件安全、MFT、安全协作、API、表单、AI 治理、适配 SIEM 的审计证据 | 属于 Kiteworks 有望实际获取的支出 |
| 排除范畴 | 缺乏策略/审计管控的消费级文件共享与通用协作 | 并非受监管买家的采购重心 |
| 相邻赛道 | SharePoint 替代、主权数据协作、DSPM、AI 数据管控 | 外延扩张路径与可替代预算 |
| 现状做法 | 邮件附件、临时 SFTP、单点工具、手工准备审计材料 | Kiteworks 试图替代的现有惯用操作 |
| 监管驱动 | HIPAA、CMMC、GDPR、PCI DSS、IRAP、FedRAMP | 驱动买方为合规治理而非单纯便利买单的根源 |
本表界定市场边界，并非正式的 TAM 模型；支出类别推断自公开产品定位及调研数据。
[CM001, CM002, CM004, CM008, CM009]2.2 需求信号与落地阻力
最强的需求信号是渠道碎片化：多数机构已使用多种渠道，不少机构却无法在技术上跨渠道统一执行策略。2026 年调查还显示，AI 治理已从理论议题变成预算项目，相当一部分受访者把 AI 安全列为首要任务。Kiteworks 可借此受益，因为同一套控制既能应对传统合规要求，也能管控 AI 数据。公开证据更能说明需求形态，尚不足以精确测算市场规模。这足以支撑赛道成立，却不能证明公司已发布可靠的 TAM 模型。[CM005, CM006, CM007]
2.3 规模研判与尽调缺口
市场机会真实存在，但现有证据不足以断言 TAM/SAM/SOM 已经清晰。资料显示，买家分散、受监管严格且工具不足；通过渠道开展企业销售也具备可行性。投资上，这些信号足以支撑“稳固利基市场并向外扩张”的判断，却不足以仅凭公开资料搭建精确的自下而上模型。因此，本次更新聚焦采购紧迫度、渠道作用和调查中反复出现的合规痛点——这些才是目前看得见的市场信号。[CM008, CM009, CM010, CM011, CM012]
| 细分领域 | 主要买家 | 核心需求 |
|---|---|---|
| 金融服务 | 首席信息安全官（CISO）/ 合规主管 | 满足审计要求、受策略管控的数据交换 |
| 公共部门 | 安全 / IT 领导层 | 满足 FedRAMP 标准 / 主权数据处理 |
| 法律 / 专业服务 | 业务合伙人 / IT 主管 | 以案件/项目为中心的安全协作 |
| 医疗健康 | 安全 / 隐私合规办公室 | 符合 HIPAA 规范的交换与证据留存 |
| 合作伙伴生态 | 渠道 / 分销商管理层 | 可产品化打包的受治理数据服务 |
本表系基于本次跟踪资料勾勒的买家细分画像，并非客户数量统计模型。
[CM008, CM011]金字塔从碎片化敏感数据交换起步，向上收窄至需求最迫切的主权合规与 AI 治理层。
各层宽度仅表示层级，不代表数值比例。
层级相对关系仅体现定性次序，未作正式金额测算。
[CM001, CM004, CM005, CM007, CM008]03竞争格局
3.1 直接对手与替代方案
竞争对手包括专业 MFT、协作工具、主权协作产品和各类单点方案。在以 MFT 为核心的工作流上，GoAnywhere 是最直接的功能型对手。SharePoint 迁移、ownCloud 和 Zivver 的案例则说明，许多买家比较的是不同形态的受治理内容交换，而非再买一款“文件传输产品”。竞争不只在于对手是谁，更在于买家如何权衡功能广度、合规能力、价格和部署控制权。Kiteworks 因此有一定护城河，但也身处拥挤的选型市场。公开证据显示，买家通常先看合规能力，再看功能是否契合。[CP001, CP002, CP004, CP005]
3.2 Kiteworks 的差异化优势
Kiteworks 的差异化在于“覆盖广、重合规”：一个控制平面覆盖八类渠道，统一审计，并为受监管行业提供报告。若买家需要跨电子邮件、MFT、API 和 AI 智能体执行策略、收集审计证据，这一定位有说服力；若买家只要高吞吐传输或以运维为先的 MFT 工具栈，吸引力就有限。GoAnywhere 是 MFT 功能上的主要对手，ownCloud 和 Zivver 则从相邻领域切入主权协作。SharePoint 仍是最大的现状替代方案，企业熟悉这类迁移的经济账。市场因此分化为覆盖广的治理平台和更专精的 MFT 产品。[CP003, CP006, CP007]
3.3 护城河韧性与薄弱环节
当采购重点是监管合规、数据主权和可审计性时，Kiteworks 的护城河较稳；在价格、操作系统灵活性和 MFT 专业能力上，优势则较弱。本次更新因此将其视为有差异化、但并非不可撼动：它在受监管场景中站得住脚，仍面临买家控本压力和专门功能的竞争。买家重视策略管控与审计时，Kiteworks 更占优势；若要的是纯 MFT 工具或高度灵活的开源部署，优势就不明显。它在受监管场景中有持久差异化，但并未垄断安全交换市场。[CP008, CP009, CP010, CP011, CP012]
| 评估维度 | Kiteworks | GoAnywhere / 替代方案 |
|---|---|---|
| 打包方式 | 覆盖全面的受治理平台全功能套件 | 针对性更强的专业 MFT 模块 |
| 部署灵活性 | 聚焦合规的受治理私有数据网络 | 更偏向 MFT 且便于日常运维 |
| 授权许可感知 | 常被视为带有合规溢价 | 常被认为更具确定性且更便宜 |
| 买家敏感点 | 安全与合规买家能容忍一定溢价 | 运维买家侧重吞吐量与控制力 |
| 切换动因 | 对跨系统统一审计证据与合规策略的诉求 | 对协议支持广度或更低成本的诉求 |
本表为商业化层面的对比，并非厂商官方价格清单。公开渠道未披露确切的产品打包定价。
[CP001, CP002, CP010]按自动化深度与受管平台广度，呈现主要替代品的大致定位。
- X: 自动化深度
- description: Low to high
- Y: 受管平台广度
- description: Low to high
| 条目 | 自动化深度 (2–8) | 受管平台广度 (2–8) | 说明 |
|---|---|---|---|
| 1. Kiteworks | 7 | 8 | |
| 2. GoAnywhere | 8 | 6 | |
| 3. SharePoint 本地部署 | 3 | 3 | |
| 4. ownCloud | 4 | 6 | |
| 5. Zivver | 5 | 6 | |
| 6. 内部自建 | 2 | 2 |
相对排序基于公开证据定性得出，并非实测打分。
[CP001, CP002, CP003, CP004, CP005, CP006]04财务情况
4.1 收入模式与公开财务数据
本次更新仍未找到经审计的财务数据，只能依据估算和间接信号评估公司。公开数据较集中于 2025 年收入预估约 $130 million、员工人数估计处于数百人的低至中段；另有数据厂商给出的收入和员工数明显更高。私营软件公司的数据存在分歧并不罕见，因此财务判断只能看方向，难以精确。现有财务信息仍是估算，而非经审计披露；用于定期跟踪尚可，却不足以判断利润率或现金流。这一点不能忽视：企业安全厂商可能单看融资显得稳健，实际经济性却未必理想。[CI001, CI002, CI003]
4.2 融资历程与资本结构
公开资本市场资料一致将 Kiteworks 描述为独角兽级私营公司，并确认其在 2024 年完成大额成长轮融资；但累计融资总额仍众说纷纭。较一致的信号是，2024 年交易包含部分老股流动性安排，公司也仍有重要资方支持。因此，本次更新认为其资金充裕，但财务状况不透明。公司有资金继续投资增长、拓展平台；公开资料却无法说明增长是否高效，或是否依赖资方支持。这些信息足以确认其独角兽级私营公司地位，却不足以推断经营杠杆或长期利润结构。[CI004, CI005, CI006, CI007]
4.3 财务质量与尽调阻碍
经营表现喜忧参半：企业软件业务已有一定规模，但利润率和现金创造能力仍缺乏可见度。收购 Bonfy 显示公司有能力投入并购、借外延增长拓展业务；这在战略上有价值，却让纯内生表现更难估算。管理层披露经审计财务数据或更完整的指标包之前，财务表现仍是尽调障碍，不能作为可靠的投资判断依据。收入、留存和利润率数据未披露前，估值只能给出区间，难以落到单点。结论是：资产负债表看起来有支撑，但实际现金创造能力仍未明。[CI008, CI009, CI010, CI011, CI012]
| 指标 | 公开 / 推算信号 | 评估结论 |
|---|---|---|
| 收入 | 预估 $130M（其他数据厂商给出的数字更高） | 表现健康但主要基于预估 |
| 员工数 | 预估 332-384 名员工 | 足以支撑面向中型企业的业务规模 |
| 融资金额 | $456M 成长轮融资；累计融资约 $592M-$650M | 资金安全垫充裕 |
| 毛利率 | 未公开 | 重大信息缺口 |
| 现金跑道 / 烧钱速度 | 未公开 | 重大信息缺口 |
本表特意将已披露资金与未公开的运营效率区分开来；各项估算数据均未经审计。
[CI002, CI003, CI004, CI005, CI011]展示从平台需求、收入估算到尚未解答的财务问题之间的逻辑链条。
| 节点 / 连接 | 节点 / 起点 | 终点 | 说明 |
|---|---|---|---|
| 节点 1 | 受管数据需求 [n1] | 受监管买方需要策略、审计与 AI 管控 | |
| 节点 2 | 企业订阅 [n2] | 核心软件许可与部署收入 | |
| 节点 3 | 渠道拓展 [n3] | 合作伙伴拓宽客户触达，并丰富产品打包方案 | |
| 节点 4 | 预估区间 [n4] | 视数据厂商口径而异，从 $130M 到数亿美元中段 | |
| 节点 5 | 资金安全垫 [n5] | $456M 成长轮融资 + 先前资方资本 | |
| 节点 6 | 仍未公开 [n6] | 毛利率、NRR、现金跑道与收入结构仍未公开 | |
| 连接 1 | 受管数据需求 [n1] | 企业订阅 [n2] | 驱动 |
| 连接 2 | 企业订阅 [n2] | 预估区间 [n4] | 支撑 |
| 连接 3 | 渠道拓展 [n3] | 预估区间 [n4] | 拉动规模 |
| 连接 4 | 资金安全垫 [n5] | 企业订阅 [n2] | 提供资金 |
| 连接 5 | 预估区间 [n4] | 仍未公开 [n6] | 并未解决 |
仅为定性推演，没有经审计的财务模型可用。
[CI002, CI003, CI004, CI005, CI011]05产品与技术
5.1 产品核心定义
Kiteworks 是受治理的安全数据交换平台，不只是文件共享工具。公司称产品覆盖八类渠道，并将治理能力延伸至 AI 智能体；因此，其范围超过传统 MFT，也比普通协作工具更接近数据控制平面。产品广度是其核心叙事，也使平台处在合规、AI 治理和数据交换基础设施的交汇处。Kiteworks 试图为各类敏感数据流动提供策略控制，包括 AI 智能体操作和开源协作工作流。开源与 MFT 相关证据显示，公司希望在商业和主权部署中都掌握受治理的数据交换层。[CE001, CE002, CE003, CE014]
| 模块 / 资产 | 工作流角色 | 证据来源 |
|---|---|---|
| 安全邮件 | 保障敏感邮件往来安全 | 公开官网首页 / 合规材料 |
| 文件共享与协作 | 兼顾外部协作与内部文件流转 | 公开官网首页 / 客户案例 |
| 托管文件传输 | 承接系统间文件流转 | 公开官网首页 / 合规材料 |
| SFTP / API / 表单 | 提供系统集成与数据录入入口 | 公开官网首页 / AWS 合作伙伴博客 |
| AI 智能体治理 | 管控并审计智能体操作 | 2026 年官网首页及调研报告 |
| 开源 ownCloud 底座 | 主权级与联邦化协作 | ownCloud OSPO 材料 |
模块名称综合自公开产品页面；本轮更新材料中并未对所有 SKU 单独定价或命名。
[CE001, CE002, CE006, CE008, CE012]5.2 实际运行机制
Kiteworks 的技术架构采用分层控制：身份、策略、加密和审计覆盖各个渠道，再汇入合规报告与适配 SIEM 的日志。AWS 自动化部署博客支持这样一种判断：客户部署已趋于标准化、可复制，而非逐个定制。这不只是给旧传输工具套上 UI，而是按基础设施方式部署、配置和审计的架构。开源 OSPO 和 FedRAMP 路径值得关注：Kiteworks 试图靠信任架构而非功能堆叠赢得客户。即使产品策略有吸引力，部署摩擦仍可能让安全平台丢单，因此自动化很重要。[CE004, CE005, CE006, CE007, CE013]
5.3 信任机制、开源与安全性
Kiteworks 也把治理做成产品能力。FedRAMP Moderate、仍在推进中的 FedRAMP High、公开安全公告库和 ownCloud OSPO 都指向同一点：信任要靠流程和可追溯性建立。公开资料没有完整列出各个 SKU 和路线图节点，因此产品版图仍有部分内容只能推断。待解的问题不是平台是否存在，而是各模块、部署选项和路线图如何定价、打包。产品路线图仍不清楚，但技术架构已远超单一文件传输工具。[CE008, CE009, CE010, CE011, CE012, CE013, CE014]
| 层级 / 控制项 | 职责定位 | 公开证据 |
|---|---|---|
| 身份与认证 | SAML、MFA、数字证书、范围受限授权 | 官网首页安全矩阵 |
| 数据加密 | TLS 1.3、AES-256、FIPS 140-3 | 官网首页与合规页面 |
| 策略引擎 | 跨渠道执行类 ABAC 访问控制规则 | 官网首页与调研报告 |
| 审计追踪 | 标准化且兼容 SIEM 的日志输出 | 官网首页与合规页面 |
| 开源治理 | 治理章程、DCO、APACHE 2.0 路线 | ownCloud OSPO 材料 |
公开资料仅概述各层架构，未提供完整的系统架构图。
[CE002, CE003, CE004, CE005, CE006]贯通基础设施、数据治理与 AI 智能体管控的分层架构。
- 基础设施层
- 托管 / 客户自管私有云及政务云环境；经 AWS 合作伙伴资料印证支持自动化与资源调配
- 身份与策略层
- SAML、MFA、证书、作用域受限委托、ABAC 风格策略
- 通道层
- 电子邮件、文件共享、MFT、SFTP、API、表单、桌面同步、AI 智能体
- 审计与证据层
- 跨通道标准化审计轨迹与合规报告
- 安全运营层
- 公开安全通告、漏洞赏金、负责任披露机制与补丁沟通
- 开源主权层
- ownCloud OSPO、DCO 贡献模型、Apache 2.0 路径
架构分层系综合公开产品与治理说明梳理而成。
[CE001, CE002, CE004, CE005, CE007, CE008]06客户情况
6.1 客户构成与应用场景
客户证据显示，Kiteworks 服务的主要是受监管企业和公共部门，包括银行、地方政府、律所、土地登记机构及合规要求严格的企业。这类买家重视可审计性、身份管理和受控的外部数据交换，不只是文件传输便利。因此，本次更新将其视为受监管数据交换的工作流工具，而非面向所有中小企业的协作应用。具名客户案例比公开财务信息更扎实：银行、公共部门、法律和受监管企业中都有重复使用，正是产品定位最有说服力的场景。[CU001, CU002, CU003]
6.2 典型案例与应用深度
多个案例显示，产品已用于正式生产环境，不只是试点。最强的采用信号来自 Savings Bank of Mendocino：银行称 95% 的贷款客户使用该平台；其次是 Sacramento，活跃用户超过 1,400 人。相比单纯展示客户标识，这些数字更能说明平台反复用于日常业务，并嵌入客户工作流。价值不在客户名单有多亮眼，而在于平台是否成为审计、贷款文件流转、案件资料交换和对外安全共享等日常环节的必需工具；这类工作流通常更难替换。[CU004, CU005, CU007]
6.3 业务韧性与客户集中度风险
公开资料也有明显边界：没有留存队列、头部客户集中度明细或 NRR 数据。具名案例让业务看起来有韧性，但投资者通常依赖的量化指标仍不透明。竞品称部分买家因产品复杂或价格偏高而离开；这值得纳入风险考量，却不是定论。由于公开资料没有披露客户集中度和留存数据，业务韧性只能从具名案例推断，无法用队列数据验证。因此，本次更新把集中度风险列为尽调缺口，而非已证实的弱点。这个缺口确实存在。[CU008, CU009, CU010, CU011, CU012, CU013]
| 客户 | 行业板块 | 公开佐证 |
|---|---|---|
| Mendocino 储蓄银行 | 银行业 | 客户案例显示 95% 的信贷客户已采用该平台 |
| Sacramento 县 | 公共部门 | 覆盖 30+ 个部门、1,400+ 名活跃用户 |
| Dickinson Wright | 法律行业 | 围绕案件的工作流及系统集成 |
| Latham & Watkins | 法律行业 | 长期运行的安全协作部署 |
| NSW Land Registry Services | 公共部门 | SSO 与混合云环境部署 |
| Paul Hartmann AG | 医疗与生命科学 | 满足 GDPR 要求的安全发票流转 |
本表列举未穷尽，仅基于本轮更新材料；此处仅计入有公开实名佐证的案例。
[CU002, CU004, CU005, CU006]核心受监管客群从首次部署走向增购扩张的演进路径。
[CU002, CU003, CU004, CU005, CU007, CU009, CU012]07风险
7.1 主要风险排序与内涵解读
主要风险包括 Accellion 数据泄露留下的声誉包袱、FedRAMP High 尚未完成，以及产品必须持续证明自身可信。安全软件常见这些问题，但 Kiteworks 更受影响，因为它的差异化依赖于成为敏感数据的可信控制平面。信任一旦动摇，价值主张就会迅速减弱。公司的风险归根结底落在信任架构上：披露、保障或执行上的缺口，对 Kiteworks 的影响会超过一般工作流软件。[CR001, CR002, CR004, CR013]
7.2 商业与渠道风险
竞品对产品复杂度和高定价的批评，是本次更新中最有用的商业警示。Kiteworks 更依赖渠道伙伴；这种模式有望高效扩张，却也增加依赖，并可能侵蚀利润率。因此，增长虽真实存在，却并非没有摩擦：产品必须足够简单，才能撑起合规溢价。历史泄露、安全公告和仍在推进的 FedRAMP High 路径，单独看都可管理，合在一起却推高整体风险。合规复杂度、渠道经济性，以及每个季度都要证明溢价产品值得购买，共同构成持续的商业压力。[CR005, CR006, CR008, CR009]
7.3 运营、AI 与安全风险
AI 治理既能带来增长，也会扩大攻击面、增加证明策略有效执行的负担。公开安全公告库和调查数据说明，Kiteworks 面对的是持续变化的风险，而非一张静态合规清单。因此，投资逻辑不仅取决于产品定位，也取决于运营纪律。公司大概率还能继续增长，但必须持续证明其信任水平优于替代方案；这对任何安全厂商都是高要求。数据主权规则和 AI 工作负载治理还在不断变化，公司必须持续证明管控有效，而非偶尔提供一次佐证。[CR007, CR010, CR011, CR012, CR014]
| 依赖项 | 风险点 | 缓解措施 |
|---|---|---|
| 渠道合作伙伴 | 渠道驱动增长可能压低利润率，也可能拖慢执行 | 开展培训认证并强化渠道治理 |
| 投资机构与控股股东 | 成长型股权资方预期公司遵守退出纪律 | 拉齐产品演进与财务退出里程碑 |
| 开源生态 | 主权合规与开源叙事会拉高外界对产品路线图的预期 | 发布公开治理章程与社区贡献模型 |
| 客户信任 | 安全领域采购方对安全事件容忍度极低 | 独立验证并持续提供证据 |
| 公共部门合规要求 | FedRAMP 及相关控制措施可能无法按期落地 | 保持持续监控并聚焦推进 ATO 获批 |
依赖项梳理自公开渠道、合规与治理资料；具体的量化敞口尚未公开。
[CR003, CR004, CR007, CR011, CR012]按发生概率与影响程度，简要呈现主要风险的定性热力图。
本矩阵刻意采用定性设计，以文字表述替代数值打分。
[CR001, CR004, CR005, CR007, CR008, CR009]08估值
8.1 核心逻辑与反向逻辑
Kiteworks 的正向逻辑清晰：受监管数据交换、AI 治理、主权协作和真实的企业客户基础都有战略价值。反方并非认为产品无关紧要，而是公司仍未披露足够的经济数据，私营市场估值无法像上市软件公司那样严格比较。因此，只有接受披露风险的投资者才适合考虑投资。估值判断刻意保持谨慎：现有证据足以说明 Kiteworks 具有战略意义，却不足以给出高确信度的入场价格，无法达到评估上市软件可比公司时所需的把握。[CV001, CV004, CV005]
8.2 估值立场与投资建议
本次更新认为，Kiteworks 的私营市场估值合理但略显偏高，并非便宜货。$1B 独角兽估值锚点可信，但收入估算差距较大，按不同数据计算，估值倍数可能合理，也可能偏贵。因此，当前更适合跟踪，而非高确信度买入。与大幅折价或明显溢价相比，“合理”更符合现有证据。业务已有一定体量，但财务披露不足，估值区间仍宽。较好的可比数据也指向同一结论：估值有其合理性，却不够精确，难以据此确定高确信度的仓位。[CV002, CV003, CV006, CV007, CV013]
8.3 乐观、基准与悲观情景
乐观情景假设 AI 治理、合规自动化和主权协作需求维持高位；基准情景假设企业客户续约平稳、渠道带动规模增长；悲观情景则假设定价压力和细分功能竞争压低估值倍数。这些情景都说得通，但只有乐观情景能支撑显著高于当前公开证据所能支持的确信度。若管理层缩小留存、利润率和现金流的披露缺口，建议可以上调；否则，维持跟踪更合适。[CV008, CV009, CV010, CV011, CV012]
| 情景 | 假设前提 | 研判结论 |
|---|---|---|
| 乐观 | AI 治理需求起量，强监管行业买方持续为控制平面买单 | 享有估值倍数溢价，投资置信度显著提升 |
| 基准 | 大企业客户稳步增长，资本方支持到位，但财务披露依然有限 | 持有 / 观察 |
| 悲观 | 竞品凭借更简易的 MFT 或更低成本胜出；信息不透明现状持续 | 估值倍数遭遇承压下修 |
仅供定性情景推演参考，不代表包含精确概率测算模型。
[CV004, CV005, CV006, CV007, CV011, CV012]从市场需求及客户验证出发，推导审慎 TRACK 建议的逻辑路径。
| 节点 / 连接 | 节点 / 起点 | 终点 | 说明 |
|---|---|---|---|
| 节点 1 | 受监管需求 [n1] | 敏感数据交换与 AI 治理都是真实的市场需求 | |
| 节点 2 | Kiteworks 平台 [n2] | 横跨多通道与 AI 智能体的统一管控平面 | |
| 节点 3 | 客户实证 [n3] | 受监管企业与公共部门的实际落地案例清晰可见 | |
| 节点 4 | 财务不透明度 [n4] | 经审计的毛利率、ARR 与留存率数据仍未披露 | |
| 节点 5 | 估值处于合理区间 [n5] | $1B 独角兽估值锚点看似合理，但谈不上便宜 | |
| 节点 6 | TRACK [n6] | 等待更充分的披露，再行评估是否高确信度买入 | |
| 连接 1 | 受监管需求 [n1] | Kiteworks 平台 [n2] | 支撑 |
| 连接 2 | Kiteworks 平台 [n2] | 客户实证 [n3] | 凭此取胜 |
| 连接 3 | 客户实证 [n3] | 估值处于合理区间 [n5] | 印证合理性 |
| 连接 4 | 财务不透明度 [n4] | 估值处于合理区间 [n5] | 限制估值 |
| 连接 5 | 估值处于合理区间 [n5] | TRACK [n6] | 导向结论 |
定性投资逻辑，并非概率模型。
[CV001, CV004, CV005, CV009, CV010, CV012]免责声明
本报告仅基于公开及第三方资料；各类预估与分析师市场数据来源均已做相应标注。
证据索引
| 编号 | 陈述 | 可信度 | 来源 |
|---|---|---|---|
| CO001 | Kiteworks is a San Mateo, California-based company founded in 1999 that evolved from the Accellion business. | 高 | SO001, SO004, SO005 |
| CO002 | Kiteworks positions its product as a private content network / private data network for controlled data exchange. | 高 | SO001, SO002 |
| CO003 | The company says it serves 3,800+ enterprise customers and protects over 100 million end users through thousands of enterprises and government agencies. | 高 | SO001, SO011 |
| CO004 | Kiteworks raised a $456 million growth equity round from Insight Partners and Sixth Street Growth in August 2024. | 高 | SO002, SO003 |
| CO005 | Public reporting and data vendors place the company’s post-money valuation at roughly $1 billion after the 2024 round. | 高 | SO003, SO004 |
| CO006 | LeadIQ estimates Kiteworks at roughly 384 employees while GetLatka estimates $130 million of 2025 revenue and 332 employees. | 中 | SO005, SO006 |
| CO007 | Kiteworks emphasizes FedRAMP, FIPS 140-3, IRAP, and a public bug bounty / responsible disclosure posture as part of its trust story. | 中 | SO001, SO007, SO012 |
| CO008 | The company launched a channel-first partner certification program in January 2026 to scale distributors, resellers, MSPs, MSSPs, and systems integrators. | 中 | SO009, SO001 |
| CO009 | Kiteworks is consolidating open-source work under ownCloud and is using a governance charter, DCO model, and Apache 2.0 default for new projects. | 中 | SO010, SO011 |
| CO010 | TechCrunch reported that the 2024 growth round was also a partial liquidity event and that the legacy Accellion breach still colors external perception. | 中 | SO003 |
| CO011 | The public sources do not disclose audited gross margin, ARR, NRR, cash flow, or exact cap-table ownership splits. | 低 | |
| CO012 | The 2024 funding round added board representation from Insight Partners and Sixth Street Growth investors. | 中 | SO002, SO003 |
| CM001 | Kiteworks is addressing the market for secure sensitive-data exchange and governance across email, file sharing, MFT, APIs, web forms, SFTP, and AI agents. | 高 | SM001, SM002 |
| CM002 | In the 2026 Kiteworks/Centiment survey, 54% of organizations used four or more sensitive-data exchange platforms and 73% lacked technical enforcement of channel restrictions. | 中 | SM001 |
| CM003 | The same survey found that cloud file sharing, email, MFT, APIs, web forms, physical media, and AI tools are all part of the operating set for most organizations. | 中 | SM001 |
| CM004 | Only 4% of survey respondents reported a single unified platform for sensitive data exchange, underscoring the market gap Kiteworks is trying to fill. | 中 | SM001 |
| CM005 | Kiteworks reports that 43% of organizations name AI security and governance as a top 12-month investment priority, and 64% already have AI in production. | 高 | SM001, SM008 |
| CM006 | The report also shows widespread compliance consequences and incident frequency, with 63% experiencing a compliance consequence and 80% experiencing at least one incident of either type. | 中 | SM001 |
| CM007 | Kiteworks’ channel program explicitly targets distributors, MSPs, MSSPs, and systems integrators, which suggests the market is best reached through partner leverage rather than self-serve demand. | 中 | SM003, SM006 |
| CM008 | Kiteworks positions the market around compliance-heavy frameworks such as HIPAA, CMMC, GDPR, PCI DSS, IRAP, and FedRAMP High rather than generic file sharing. | 高 | SM002, SM004, SM005 |
| CM009 | The company’s SharePoint migration argument frames the market as a shift away from fragmented tools toward unified, audited data-exchange platforms. | 中 | SM005 |
| CM010 | GoAnywhere’s competitor narrative confirms that buyers compare Kiteworks against specialized MFT products on automation, protocol breadth, and licensing predictability. | 中 | SM007 |
| CM011 | AWS describes Kiteworks as serving thousands of public and private sector customers globally, which implies a broad enterprise compliance market rather than a narrow niche. | 中 | SM006 |
| CM012 | The available sources do not provide a defensible TAM, SAM, or SOM in dollars; the refresh is therefore evidence-constrained rather than market-model complete. | 低 | |
| CP001 | GoAnywhere positions itself as a narrower, more MFT-focused rival and claims better automation, protocol breadth, and lower operating overhead than Kiteworks. | 中 | SP001 |
| CP002 | GoAnywhere also concedes that Kiteworks has FedRAMP High-level compliance and broad secure-exchange features such as tamper-evident logging and secure forms. | 中 | SP001 |
| CP003 | Kiteworks responds by emphasizing eight secure access channels, unified audit logging, and compliance reporting under one control plane. | 中 | SP002 |
| CP004 | The ownCloud OSPO materials argue for federation, sovereignty, open standards, and the retirement of the CLA in favor of DCO-based contribution. | 中 | SP003, SP004 |
| CP005 | Zivver’s partnership note underscores a European sovereign-communications angle and shows that Kiteworks is consolidating adjacent secure-collaboration assets. | 中 | SP005 |
| CP006 | The SharePoint migration article frames Kiteworks as an answer to nation-state exploitation, compliance gaps, and a patch-cycle model that is no longer enough. | 中 | SP006 |
| CP007 | AWS’s partner blog shows Kiteworks as an automation-heavy platform with large customer on-boarding infrastructure, which suggests enterprise scale rather than a purely niche product. | 中 | SP007 |
| CP008 | UpGuard’s vendor-risk monitoring indicates Kiteworks remains a live security-reviewed asset rather than a sleepy legacy install base. | 低 | SP008 |
| CP009 | The competitive moat appears strongest where regulated buyers value auditability, sovereign deployment, and integrated compliance more than raw MFT feature depth. | 中 | SP002, SP006, SP007 |
| CP010 | The moat looks weaker where buyers are optimizing for MFT throughput, ETL-style transformation, OS flexibility, or lower-cost licensing. | 中 | SP001 |
| CP011 | The public sources do not quantify share shifts, win rates, or customer churn against any named competitor. | 低 | |
| CP012 | Kiteworks’ anti-lock-in story is strongest when open-source governance and sovereign deployment are part of the buying criteria. | 中 | SP003, SP004, SP005 |
| CI001 | No audited public filing in the refresh set discloses Kiteworks revenue, gross margin, ARR, NRR, or cash flow. | 低 | |
| CI002 | GetLatka estimates 2025 revenue at about $130 million and headcount at 332. | 中 | SI002 |
| CI003 | LeadIQ estimates roughly 384 employees and a $250 million to $500 million revenue range, which is materially higher than GetLatka’s estimate. | 中 | SI003 |
| CI004 | Tracxn lists $650 million of total funding across five rounds and a $1 billion post-money valuation in August 2024. | 中 | SI001 |
| CI005 | The August 2024 round was a $456 million growth equity investment and a partial liquidity event rather than a straight primary-only financing. | 高 | SI004, SI005, SI007 |
| CI006 | The latest round reportedly added investor board seats and marked a meaningful secondary component for prior holders. | 中 | SI004, SI005 |
| CI007 | Forge’s private-market page shows Kiteworks as an actively traded private software name with a $1.02 billion reference valuation. | 中 | SI006 |
| CI008 | Kiteworks has used M&A to extend its platform, including the 2026 Bonfy.AI acquisition, which suggests growth can be inorganic as well as organic. | 中 | SI008 |
| CI009 | The company describes the 2024 investment as validating a Rule-of-50-style growth narrative, but that statement is marketing rather than audited performance. | 中 | SI004 |
| CI010 | The available sources imply an enterprise software model with meaningful partner/channel economics rather than a low-touch self-serve motion. | 中 | SI004, SI002 |
| CI011 | Because the key metrics are privately held, the refresh still cannot underwrite cash runway, margin path, or retention with confidence. | 低 | |
| CI012 | The public evidence is enough to support a unicorn-scale private company, but not enough to judge whether the growth equity round was cheap or expensive. | 中 | SI001, SI002, SI003, SI005, SI006 |
| CE001 | Kiteworks says the platform unifies eight channels under one governance framework, including email, file sharing, MFT, SFTP, APIs, forms, desktop sync, and AI-agent access. | 高 | SE001, SE008 |
| CE002 | The platform’s control model centers on SAML/MFA/PIV/CAC, scoped delegation, ABAC-style policy, FIPS 140-3, and a consolidated audit trail. | 中 | SE001 |
| CE003 | Kiteworks says the same unified framework generates compliance reports and SIEM-ready audit evidence across channels. | 中 | SE001, SE008 |
| CE004 | FedRAMP Moderate authorization has been in place since 2017 and the secure-gov-cloud path is now FedRAMP High In Process rather than merely aspirational. | 中 | SE002 |
| CE005 | The security-advisories repository and bug-bounty language show active vulnerability disclosure and patch communication rather than a closed-box posture. | 中 | SE003 |
| CE006 | The ownCloud OSPO introduces a published governance charter, formal vulnerability disclosure, DCO contribution model, and open standards such as WebDAV and OIDC. | 中 | SE004, SE005, SE006 |
| CE007 | AWS says Kiteworks uses automation to cut customer onboarding from hours to about 15 minutes and reduce testing / certification from days to hours. | 中 | SE007 |
| CE008 | Kiteworks’ own 2026 survey report presents the platform as a unified control plane for data governance, compliance, and protection. | 中 | SE008 |
| CE009 | The architecture story is strongest where buyers want policy enforcement and logging across multiple channels rather than a single-purpose MFT engine. | 中 | SE001, SE007 |
| CE010 | The public record still does not specify every module bundle, deployment tier, or roadmap sequence in enough detail to fully map SKU economics. | 低 | |
| CE011 | The existence of public advisories implies the platform has a live attack surface, but not necessarily a higher-than-average security failure rate. | 低 | SE003 |
| CE012 | Open-source governance and sovereign deployment are being used as product features, not just marketing language. | 中 | SE004, SE005, SE006 |
| CE013 | Collabora’s partner page confirms the ownCloud by Kiteworks integration and underscores the sovereign-open-source angle of the broader platform story. | 中 | SE009 |
| CE014 | Kiteworks’ managed file transfer page explicitly frames MFT as secure, automated file transfer rather than a separate bolt-on control plane. | 中 | SE010 |
| CU001 | Kiteworks’ visible customer base spans banks, local government, law firms, and regulated enterprise workflows. | 中 | SU001, SU002, SU008 |
| CU002 | Savings Bank of Mendocino uses Kiteworks for loan documents, financial statements, auditors, HR, finance, and other sensitive exchanges. | 中 | SU001 |
| CU003 | Savings Bank says roughly 95% of its lending customers use Kiteworks, which is one of the strongest adoption signals in the refresh set. | 中 | SU001 |
| CU004 | The County of Sacramento case study shows more than 1,400 active users across 30+ departments and a distributed public-sector deployment. | 中 | SU002 |
| CU005 | Dickinson Wright and Latham & Watkins show that law-firm use cases focus on matter-centric exchange, auditability, and integration with legal systems. | 中 | SU002, SU008 |
| CU006 | NSW Land Registry and Paul Hartmann-style deployments show the platform fits regulated workflows that need SSO, encryption, and compliance control. | 中 | SU002, SU007 |
| CU007 | AWS and the company’s own survey materials indicate the platform scales to thousands of public and private-sector customers and over 100 million end users. | 中 | SU004, SU007 |
| CU008 | Zivver’s partnership note shows the company is also pushing into sovereign European communication use cases and cross-border collaboration. | 中 | SU005 |
| CU009 | The go-to-market motion is clearly channel-mediated, with distributors, MSPs, MSSPs, system integrators, and partner tooling all visible in the refresh set. | 中 | SU004, SU005, SU008 |
| CU010 | GoAnywhere’s competitor page argues that some customers leave Kiteworks because of complexity, premium pricing, rigid architecture, and limited transformation depth. | 中 | SU006 |
| CU011 | The public sources do not reveal customer concentration, retention cohorts, or NRR, so durability remains inferred rather than measured. | 低 | |
| CU012 | Kiteworks is especially sticky where buyers need a single audit log across multiple regulated workflows rather than a consumer-style sharing product. | 中 | SU001, SU008 |
| CU013 | The refresh set still does not disclose customer concentration or retention cohorts, so durability is visible in case-study form but not in cohort form. | 低 | SU003, SU001, SU002 |
| CR001 | The 2021 Accellion breach remains the clearest reputational overhang because it affected at least 300 organizations and is still invoked in 2024 coverage. | 中 | SR001 |
| CR002 | Kiteworks’ public advisory repository and bug-bounty language show active security operations, but also imply a live vulnerability surface that must be managed continuously. | 中 | SR002 |
| CR003 | UpGuard’s continuous monitoring reinforces that external stakeholders still treat Kiteworks as a live security-risk subject. | 低 | SR003 |
| CR004 | FedRAMP High is not yet completed; the secure-gov-cloud path remains In Process and still needs a final ATO. | 中 | SR004 |
| CR005 | GoAnywhere’s competitor page explicitly calls out Kiteworks complexity, a steep learning curve, premium pricing, and rigid architecture as customer pain points. | 中 | SR005 |
| CR006 | The 2026 Kiteworks survey shows 80% of organizations experienced at least one security incident, which supports the thesis that the market is crowded with unresolved risk. | 中 | SR006 |
| CR007 | The partner-channel program expands reach but also increases dependency on distributors, resellers, MSPs, MSSPs, and systems integrators. | 中 | SR007 |
| CR008 | Bonfy.AI is the eighth acquisition in five years, so M&A integration and product-architecture assimilation are now recurring execution risks. | 中 | SR008 |
| CR009 | AI-agent governance expands the attack surface because mis-scoped agents can move sensitive data at machine speed. | 中 | SR006, SR002 |
| CR010 | The company’s public sources do not settle litigation, enforcement, or liability exposure beyond the legacy breach narrative. | 低 | |
| CR011 | The strongest mitigation pattern is centralized policy, auditability, and formal disclosure; the weakest exposure is any place where customers can bypass those controls through workarounds. | 中 | SR002, SR004, SR006 |
| CR012 | The risk profile is high but not fatal: the business sells the controls that most organizations need, yet it must keep earning trust every quarter. | 中 | SR001, SR004, SR006, SR007 |
| CR013 | The company's own 2026 sovereignty commentary shows regulatory complexity is still a live operating risk, not a solved marketing theme. | 中 | SR010 |
| CR014 | Kiteworks's AI-risk commentary underscores that agentic and workload-governance issues increase the burden of proof on the product. | 中 | SR011 |
| CV001 | The most defensible public valuation anchor remains the August 2024 $456 million growth round at just over $1 billion post-money. | 高 | SV001, SV002, SV003, SV004 |
| CV002 | Revenue estimates range from roughly $130 million to the mid-hundreds depending on vendor, so any valuation multiple is only approximate. | 中 | SV002, SV003 |
| CV003 | Using the lower revenue estimate, Kiteworks trades at roughly 7-8x revenue; using the higher estimate, the multiple compresses materially. | 中 | SV002, SV003, SV004 |
| CV004 | The bull case is that AI governance, FedRAMP / sovereign-compliance demand, and partner-led scale keep the company on a premium software path. | 中 | SV008, SV005, SV006 |
| CV005 | The base case is a durable but not hypergrowth enterprise-security franchise with enough growth to hold a solid private-market multiple. | 中 | SV001, SV002, SV008 |
| CV006 | The bear case is that complexity, premium pricing, and competition from narrower MFT and sovereign-collaboration tools compress growth and margin expectations. | 中 | SV007, SV004 |
| CV007 | The Bonfy acquisition is a small-ticket strategic move by private-equity standards, so it improves product relevance more than it changes the valuation math. | 中 | SV005, SV006 |
| CV008 | A reasonable public-markets analogy would treat Kiteworks as a governed-data infrastructure/security company rather than a pure MFT vendor. | 中 | SV007, SV008 |
| CV009 | Because audited margin, ARR, retention, and cash-flow data are missing, the company cannot yet be underwritten with the confidence of a public software name. | 低 | |
| CV010 | The refresh recommendation is to track, not buy, because the strategic position is attractive but the disclosure set is still too thin for high-conviction entry sizing. | 中 | SV001, SV002, SV004, SV007 |
| CV011 | The main valuation upside comes from proving that regulated enterprise buyers will pay for AI governance and sovereign compliance at scale. | 中 | SV008, SV005, SV006 |
| CV012 | The main valuation downside is that the business could remain strategically important while still being difficult to diligence cleanly from public sources. | 中 | SV001, SV002, SV004 |
| CV013 | Secondary-market comp databases still imply that Kiteworks trades in the broad billion-dollar orbit, but they do not narrow the range enough to override disclosure caution. | 中 | SV009, SV001, SV002 |
| 编号 | 出版方 | 标题 | 引文 |
|---|---|---|---|
| SO001 | Kiteworks | Kiteworks® | Controlled Data Exchange. Complete Data Sovereignty. Agent and Human Governance. |
| SO002 | Kiteworks | Kiteworks Private Content Network (PCN) Vision Validated by $456M Growth Equity Investment From Insight Partners and Sixth Street Growth | today announced a $456 million growth equity investment |
| SO003 | TechCrunch | Kiteworks captures $456M at a $1B+ valuation to help secure sensitive data | raised $456 million... values the company at over $1 billion |
| SO004 | Tracxn | Kiteworks - Funding & Investors | Kiteworks has raised a total of $650M over 5 funding rounds |
| SO005 | GetLatka | Kiteworks Revenue 2025: $130M Est. ARR, $1B Valuation (2024) | Kiteworks generated an estimated $130M in annual revenue in 2025 |
| SO006 | LeadIQ | Kiteworks Company Overview, Contact Details & Competitors | As of August 2026, Kiteworks has approximately 384 employees |
| SO007 | Kiteworks | FedRAMP High In Process: A Major Step Toward Full Authorization | advanced to FedRAMP High In Process status |
| SO008 | Kiteworks | Kiteworks Advances to FedRAMP High In Process | working directly with a federal agency partner toward a full Authorization to Operate (ATO) |
| SO009 | Kiteworks | Kiteworks Channel First Training and Certification Program for Global Partner Network | equips distributors, resellers, MSPs, MSSPs, Global System Integrators |
| SO010 | Kiteworks | Kiteworks Open Source Program Office for ownCloud | Kiteworks is consolidating all of its open-source activities under the Open Source Program Office |
| SO011 | ownCloud | Kiteworks Launches the ownCloud Open Source Program Office | governance charter |
| SO012 | Kiteworks | Responsible Disclosure and Security Advisories | We run a public bug bounty program on bugcrowd.com. |
| SM001 | Kiteworks | 2026 Data Security and Compliance Risk Report | 54% of organizations use 4 or more separate platforms for sensitive data exchange |
| SM002 | Kiteworks | Kiteworks® | Every way Your Organization Exchanges Data, Governed. |
| SM003 | Kiteworks | Channel First Training and Certification Program | Organizations are spending billions to solve data security and compliance challenges |
| SM004 | Kiteworks | FedRAMP High In Process: A Major Step Toward Full Authorization | providing a clear and credible path to the most advanced protection available |
| SM005 | Kiteworks | Why waiting on SharePoint on-premises puts sensitive data at risk | Organizations are moving from disparate tools for file sharing, email security, and managed file transfer to integrated platforms |
| SM006 | AWS | Kiteworks Accelerates Private Content Network Provisioning with Automation on AWS | used by thousands of public and private sector customers globally |
| SM007 | GoAnywhere | GoAnywhere vs. Kiteworks: Why IT Teams Choose the Top Kiteworks Alternative for Enterprise MFT | Businesses today require automation-first workflows, enterprise-grade security controls, and predictable licensing |
| SM008 | Kiteworks | AI Data Governance and Containment in 2026 Survey Report | 43% name AI security and governance as their top investment priority for the next 12 months |
| SP001 | GoAnywhere | GoAnywhere vs. Kiteworks: Why IT Teams Choose the Top Kiteworks Alternative for Enterprise MFT | Businesses today require automation-first workflows, enterprise-grade security controls, and predictable licensing |
| SP002 | Kiteworks | Kiteworks® | Eight Secure Access Channels |
| SP003 | ownCloud | Kiteworks Launches the ownCloud Open Source Program Office — Formalizing Governance, Retiring the CLA, and Committing to Sovereign, Open, Federated File Sharing for the Enterprise | open source is a social contract |
| SP004 | ownCloud | Kiteworks Open Source Program Office for ownCloud | Kiteworks is consolidating all of its open-source activities under the Open Source Program Office |
| SP005 | Zivver | Why we at Zivver have joined forces with Kiteworks | trusted by over 11,000 organizations |
| SP006 | Kiteworks | SharePoint on-premises endgame / migration strategy | Organizations are moving from disparate tools for file sharing, email security, and managed file transfer to integrated platforms |
| SP007 | AWS | Kiteworks Accelerates Private Content Network Provisioning with Automation on AWS | Kiteworks runs hundreds of servers for securing customer communications |
| SP008 | UpGuard | Kiteworks Vendor Risk Report | UpGuard runs 330+ external checks on Kiteworks continuously. |
| SI001 | Tracxn | Kiteworks - Funding & Investors | Kiteworks has raised a total of $650M over 5 funding rounds |
| SI002 | GetLatka | Kiteworks Revenue 2025: $130M Est. ARR, $1B Valuation (2024) | Kiteworks generated an estimated $130M in annual revenue in 2025 |
| SI003 | LeadIQ | Kiteworks Company Overview, Contact Details & Competitors | As of August 2026, Kiteworks has approximately 384 employees |
| SI004 | Kiteworks | Kiteworks Private Content Network Vision Validated by $456M Growth Equity Investment | This minority stake investment affirms Kiteworks’ role |
| SI005 | Crunchbase News | Kiteworks Locks Up $456M From Insight, Sixth Street | the company described the new round as “growth equity,” but also said it was a “partial liquidity event” |
| SI006 | Forge | Buy and Sell Kiteworks Stock, $1.02B Valuation | Total funding $456M |
| SI007 | TechCrunch | Kiteworks captures $456M at a $1B+ valuation to help secure sensitive data | raised $456 million from Insight Partners and Sixth Street Growth |
| SI008 | CTech | Kiteworks acquires Israeli startup Bonfy.AI in deal estimated at tens of millions of dollars | Kiteworks has acquired Israeli cybersecurity startup Bonfy.AI |
| SE001 | Kiteworks | Kiteworks® | Kiteworks unifies employee and AI agent data exchange across eight channels |
| SE002 | Kiteworks | FedRAMP High In Process: A Major Step Toward Full Authorization | Kiteworks’ Secure Gov Cloud has successfully completed the first two stages of this rigorous process |
| SE003 | Kiteworks | Responsible Disclosure and Security Advisories | We document all relevant vulnerabilities affecting Kiteworks and its associated applications in this repository. |
| SE004 | Kiteworks | Kiteworks Open Source Program Office for ownCloud | A Published Governance Charter |
| SE005 | ownCloud | Kiteworks Launches the ownCloud Open Source Program Office | We operate under a public Governance Charter |
| SE006 | ownCloud | ownCloud Contribution Guide | ownCloud does not require a Contributor License Agreement (CLA). |
| SE007 | AWS | Kiteworks Accelerates Private Content Network Provisioning with Automation on AWS | customer onboarding ... within 15 minutes of subscription confirmation |
| SE008 | Kiteworks | 2026 Data Security and Compliance Risk Report | The platform provides customers with a secure data exchange that delivers data governance, compliance, and protection in a unified control plane. |
| SE009 | Collabora Online | ownCloud by Kiteworks | ownCloud by Kiteworks |
| SE010 | Kiteworks | Secure Managed File Transfer (MFT): Full Protection for Automated File Transfers | Full Protection for Automated File Transfers |
| SU001 | Kiteworks | Savings Bank of Mendocino County Makes Banking Easier and More Secure | Savings Bank deployed Kiteworks in 2011 |
| SU002 | AppsruntheWorld | List of Kiteworks Platform Customers | County of Sacramento... more than 1,400 active users |
| SU003 | Kiteworks | Kiteworks® | 3,800+ Enterprise Customers |
| SU004 | AWS | Kiteworks Accelerates Private Content Network Provisioning with Automation on AWS | used by thousands of public and private sector customers globally |
| SU005 | Zivver | Why we at Zivver have joined forces with Kiteworks | trusted by over 11,000 organizations |
| SU006 | GoAnywhere | GoAnywhere vs. Kiteworks: Why IT Teams Choose the Top Kiteworks Alternative for Enterprise MFT | customers choose to migrate away from the platform due to friction in five specific areas |
| SU007 | Kiteworks | Data Security and Compliance Risk Report | over 100 million end-users and thousands of global enterprises and government agencies |
| SU008 | iManage | Kiteworks | iManage | Kiteworks consolidates all activity into a single, normalized audit log |
| SR001 | TechCrunch | Kiteworks captures $456M at a $1B+ valuation to help secure sensitive data | the former Accellion company suffered a major data breach in 2021 |
| SR002 | Kiteworks | Responsible Disclosure and Security Advisories | We document all relevant vulnerabilities affecting Kiteworks and its associated applications in this repository. |
| SR003 | UpGuard | Kiteworks Vendor Risk Report | Kiteworks Vendor Risk Report |
| SR004 | Kiteworks | FedRAMP High In Process: A Major Step Toward Full Authorization | full Authorization to Operate (ATO) as the next and final milestone |
| SR005 | GoAnywhere | GoAnywhere vs. Kiteworks: Why IT Teams Choose the Top Kiteworks Alternative for Enterprise MFT | High Complexity & Steep Learning Curve |
| SR006 | Kiteworks | 2026 Data Security and Compliance Risk Report | 80% experienced at least one security incident |
| SR007 | Kiteworks | Channel First Training and Certification Program | distributors, resellers, managed service providers (MSPs), managed security service providers (MSSPs) |
| SR008 | CTech | Kiteworks acquires Bonfy.AI | this is the eighth Kiteworks acquisition in five years |
| SR010 | Kiteworks | GCC High Limitations: Kiteworks 2026 Data Sovereignty Report Insights | |
| SR011 | Kiteworks Substack | 66% of AI Workloads Came Home. The Risk Didn't. | |
| SV001 | Tracxn | Kiteworks - Funding & Investors | Kiteworks has raised a total of $650M over 5 funding rounds |
| SV002 | GetLatka | Kiteworks Revenue 2025: $130M Est. ARR, $1B Valuation (2024) | Kiteworks reached a $1B valuation in 2024 |
| SV003 | Forge | Buy and Sell Kiteworks Stock, $1.02B Valuation | Kiteworks funding rounds and valuation |
| SV004 | TechCrunch | Kiteworks captures $456M at a $1B+ valuation to help secure sensitive data | raised $456 million from Insight Partners and Sixth Street Growth |
| SV005 | CTech | Kiteworks acquires Israeli startup Bonfy.AI in deal estimated at tens of millions of dollars | the acquisition cost has not been disclosed but is estimated... tens of millions of dollars |
| SV006 | SecurityWeek | Kiteworks Acquires Bonfy.AI to Fill the AI Gap in Data Governance | This is the eighth Kiteworks acquisition in five years |
| SV007 | GoAnywhere | GoAnywhere vs. Kiteworks: Why IT Teams Choose the Top Kiteworks Alternative for Enterprise MFT | Premium Pricing |
| SV008 | Kiteworks | Private Content Network vision validated by $456M growth equity investment | This minority stake investment affirms Kiteworks’ role |
| SV009 | Caplight | Kiteworks Valuation, Share Price & Funding | |
| SV010 | TechFundingNews | Cybersecurity unicorn Kiteworks snaps $465M at over $1B valuation to secure communications | |
| SV011 | Multiples VC | Kiteworks Revenue, Valuation, Funding & Investors | |
| SV012 | LeadIQ | Kiteworks Company Overview, Contact Details & Competitors |