Corero Network Security
- Headquarters
- London, UK
- Phone
- +44 20-3427-3409
Corero Network Security is a UK-listed technology company that specializes in automated, real-time detection and mitigation of distributed denial-of-service (DDoS) attacks. Its solutions protect service providers, hosting companies, and enterprises from increasingly sophisticated threats while ensuring digital service availability. The company's flagship SmartWall ONE platform delivers inline mitigation with sub-second response at up to 800 Gbps, combining attack detection, traffic analysis, network visibility, and reporting into a single system. Corero also offers zero-trust enforcement at the network edge and enables providers to deliver DDoS protection as a managed service. Headquartered in London, with key operational centers in Massachusetts and Edinburgh, Corero is publicly traded on the London Stock Exchange's AIM market (ticker: CNS) and the US OTCQX Market (ticker: DDOSF). In fiscal year 2025, the company reported $23.9 million in annual recurring revenue, up 23% year-over-year, with a 98% customer retention rate and an adjusted EBITDA of $1.5 million. Its solutions are deployed through strategic alliances with HPE, Juniper Networks, Akamai, and GTT.
Detailed Review
Business & Market Position
Corero Network Security is a pure-play DDoS protection company focused on automated, inline mitigation that avoids traffic rerouting to scrubbing centers. It addresses the growing frequency and sophistication of DDoS attacks targeting service providers, telcos, data centers, and digital enterprises. Corero’s technology handles volumetric floods, protocol abuse, and low-and-slow attacks without human intervention. According to its 2026 Threat Intelligence Report, over 82% of attacks are under 1 Gbps, daily attacks have increased 5%, and vector changes occur every 60 seconds. Corero was named the only "Innovator" in the 2025 SPARK Matrix for DDoS mitigation leaders.
Products & Platforms
Corero’s core platform is SmartWall ONE, providing sub-second, inline attack detection and blocking up to 800 Gbps for volumetric, protocol, and low-and-slow attacks. SecureWatch offers scalable protection against external DDoS and internal botnet threats in complex edge and subscriber environments. The Zero Trust Network Edge enforces continuous verification and dynamic policy inline across layers 3–7. Traffic Analysis delivers real-time dashboards, attack analytics, anomaly detection, and forensics. The Managed Service (Clean Pipe) enables ISPs, telcos, and hosting providers to offer DDoS protection as a recurring revenue service to downstream customers. Corero also provides subscription-based threat intelligence reports and value-added services including deployment support, tuning, and 24/7 monitoring.
Financial & Operational Highlights
For fiscal year 2025, Corero reported revenue of $25.5 million, annual recurring revenue of $23.9 million (23% YoY growth), adjusted EBITDA of $1.5 million, and a 98% customer retention rate. The company has raised $14.5 million over six rounds since 2003, with its latest round post-IPO. It serves customers across North America, EMEA, APAC, and Latin America.
Partnerships & Customer Wins
Key strategic alliances include HPE, Juniper Networks, Akamai, and GTT. Notable customer case studies include TierPoint, which reduced mitigation time from 6 minutes to 18 seconds; Forte Telecom, which deployed a clean-pipe solution for Brazilian ISPs; and Myriad360, which implemented hybrid security for healthcare. Corero follows a partner-led go-to-market model.
Corporate Governance
Corero adheres to the Quoted Company Alliance Corporate Governance Code. The board includes Jeremy Nicholls, Carl Herberger, Jens Montanana, Peter George, Richard Last, Andrew Miller, Rob Scott, and Chris Goulden (Chairman).
Key Products
SmartWall ONE
Core DDoS mitigation platform providing sub-second, inline attack detection and blocking up to 800 Gbps. Always-on, automatic protection against volumetric, protocol, and low-and-slow attacks.
SecureWatch
Scalable protection technology for external DDoS and internal botnet threats in complex edge and subscriber environments, enabling a cost-effective economic model.
Zero Trust Network Edge
Continuous verification at the network edge with dynamic policy enforcement inline alongside DDoS protection across layers 3–7.
Traffic Analysis
Real-time dashboards, attack analytics, anomaly detection, and full forensics providing actionable intelligence for network and security teams.
Managed Service (Clean Pipe)
Enables ISPs, telcos, and hosting providers to offer DDoS protection as a service to downstream customers, creating recurring revenue streams.
Key Persons
- Carl Herberger
Chief Executive Officer (CEO)