Private company

Sourcefire

Logo: Karin Pindle, Public domain, via Wikimedia Commons3

American computer security company

Sourcefire, Inc was a technology company that developed network security hardware and software. The company's Firepower network security appliances were based on Snort, an open-source intrusion detection system (IDS). Sourcefire was acquired by Cisco for $2.7 billion in July 2013.2 It was founded by Martin Roesch.1 Wikipedia text CC BY-SA 4.0

Last updated Oct 20, 2026.

Overview

2001Founded1

Sourcefire, Inc was a technology company that developed network security hardware and software. The company's Firepower network security appliances were based on Snort, an open-source intrusion detection system (IDS). Sourcefire was acquired by Cisco for $2.7 billion in July 2013.2

Corporate structure

Sourcefire is part of a group headed by Cisco. 320 entities, 82 countries on record. Switch between the flow chart and the network, and select any entity to see its details.

Built from parent and subsidiary links from GLEIF, the Global Legal Entity Identifier Foundation (CC0); subsidiaries listed in Exhibit 21 of annual reports filed with the SEC; subsidiaries, stakes and holdings from Wikidata (CC0). Each entity in the chart links to its source.

The story

Founded by Martin Roesch in 2001.1

Sourcefire was founded in 2001 by Martin Roesch, the creator of Snort. The company created a commercial version of the Snort software, the Sourcefire 3D System, which evolved into the company's Firepower line of network security products. The company's headquarters was in Columbia, Maryland in the United States, with offices abroad.

From Wikipedia’s article on Sourcefire, shared under CC BY-SA 4.0.4

Leadership

Who has led Sourcefire, and when. Pick a name to see everywhere that person has worked.

Products and brands

  • software

Listed on Wikidata.1

Products

Firepower

The Sourcefire Firepower line of appliances are designed to form part of a layered security defense. They can be deployed as:

Next-Generation Intrusion Prevention System (NGIPS), with network visibility into hosts, operating systems, applications, services, protocols, users, content, network behavior and network attacks and malware.

Next-Generation Firewall (NGFW) with NGIPS, incorporating access and application control, threat prevention and firewall capabilities

Next-Generation Intrusion Prevention System with integrated:

Read the full text

Application control

Malware protection

URL filtering

Advanced Malware Protection Appliance for dedicated inline network protection against advanced malware.

Advanced Malware Protection

Sourcefire Advanced Malware Protection (AMP) offers malware analysis and protection for networks and endpoints using big data analytics to discover, understand and block advanced malware outbreaks, advanced persistent threats (APTs) and targeted attacks. AMP enables malware detection and blocking while provisioning continuous analysis and retrospective alerting, using Sourcefire's cloud security intelligence.

Advanced Malware Protection can be deployed inline via a product key on NGIPS, dedicated AMP Firepower appliance or on endpoints, virtual and mobile devices with FireAMP.

Snort

Snort is an open source network intrusion prevention and detection system utilizing a rule-driven language, which combines signature, protocol and anomaly based inspection methods. Developed in tandem with the Snort open source community, its developers claim it is the most widely deployed intrusion detection and prevention technology worldwide.

Immunet

Immunet uses the cloud virus definitions along with virus definitions from Clam AntiVirus which is an open source (GPL) anti-virus toolkit primarily used on UNIX operating systems designed for e-mail scanning on e-mail gateways. It provides a number of utilities including a multi-threaded daemon, a command-line interface scanner and tool for automatic database updates. The core of the package is an anti-virus engine available in a form of a shared library. Immunet was provided in two versions, Free and Plus.

As of June 10, 2014, Immunet Plus is no longer available, replaced with Immunet Free, supported by Cisco.[8]

Sourcefire Vulnerability Research Team

The Sourcefire Vulnerability Research Team (VRT) was a group of network security engineers which discovered and assessed trends in hacking activities, intrusion attempts, and vulnerabilities. Members of the Sourcefire VRT include the ClamAV team as well as authors of several standard security reference books and articles. The Sourcefire VRT is also supported by the resources of the open source Snort and ClamAV communities.

The group focuses on developing vulnerability-based rules to protect against emerging exploits for Sourcefire customers and Snort users. The VRT has provided zero-day protection for outbreaks of malware, including Conficker, Netsky, Nachi, Blaster, Sasser, Zotob, Nachi among others. The VRT also delivers rules that provide same day protection for Microsoft Tuesday vulnerabilities, develops the official Snort rules used by the Sourcefire 3D System, develops and maintains the official rule set of Snort.org, and maintains shared object rules that are distributed for various platforms in binary format.

Following the Cisco acquisition of Sourcefire in 2013, the VRT combined with Cisco's TRAC and SecApps (Security Applications) group to form Cisco Talos. "Talos" was officially coined in usage in 2014, followed by its trademark, and was announced at Blackhat that year.

From Wikipedia’s article on Sourcefire, shared under CC BY-SA 4.0.4

Subsidiaries and ownership

Parent company

From Wikidata.1

Acquisitions

  1. Succeeded by Cisco1

Timeline

  1. 2013Dissolved Dissolved1
  2. 2013Acquired Acquired by Cisco1
  3. 2001Founded Founded1

Sources

The numbers on this page point here. Each one links to the record it came from.

  1. 1
  2. 2
  3. 3
  4. 4