Blue Coat Systems
| Company type | Private (before acquisition) |
|---|---|
| Industry | Cybersecurity, Network management |
| Predecessor | CacheFlow |
| Founded | March 1996 in Redmond, Washington, United States |
| Founder | Michael Malcolm, Joe Pruskowski, Doug Crow |
| Defunct | August 1, 2016 |
| Fate | Acquired by Symantec |
| Successor | Symantec (later part of Broadcom) |
| Headquarters | Silicon Valley , United States |
Area served | Worldwide |
Key people | Greg Clark (CEO at acquisition), Michael Borman (former CEO), Brian NeSmith (former CEO) |
| Products | Cybersecurity hardware and software, web gateway appliances, parental control software |
| Parent | Symantec (2016–2019), then Broadcom (2019–present) |
Blue Coat Systems, Inc. specialized in cybersecurity and network management, delivering a range of hardware, software, and professional services. Established in 1996 under the name CacheFlow, the company was acquired by Symantec in 2016 and subsequently became part of Broadcom in 2019 following Symantec’s sale of its Enterprise Security division.
Its extensive security product lineup was particularly recognized for web gateway appliances designed to inspect internet traffic for threats, verify user identities, handle encrypted data streams, and oversee employee online behavior. Additionally, it offered consumer-oriented solutions such as parental control software. While initially serving internet service providers, Blue Coat later shifted its emphasis toward servicing large corporate clients.
History
CacheFlow was founded in March 1996 in Redmond, Washington by Michael Malcolm, Joe Pruskowski, and Doug Crow, beginning with $1 million raised from angel investors. The company’s original mission centered on accelerating web performance by caching frequently requested content. In 1996, Benchmark Capital contributed $2.8 million in funding, followed by investments from U.S. Venture Partners and Technology Crossover Ventures.
The firm relocated its headquarters to Silicon Valley in 1997 and unveiled its inaugural product, the CacheFlow 1000, in 1998. The following year saw the launch of CacheOS operating system and an expansion of its caching appliance portfolio with models such as the CacheFlow 500, which received industry praise for both performance and user-friendliness.
Despite limited revenue and ongoing losses, CacheFlow went public through an IPO in November 1999, raising $132 million. Benchmark Capital’s Andrew Rachleff played a key role in appointing Brian NeSmith as CEO that same year. In 2000, the company introduced server and client acceleration products tailored for enterprise networks and formed a partnership with Akamai Technologies.
Revenue increased substantially from $7 million in 1998 to $97 million by 2001, capturing a strong market position though profitability remained elusive. To bolster content delivery capabilities, CacheFlow acquired Springbank Networks for $180 million and Entera for $440 million during 2000.
In 2001, the company rebranded as Blue Coat Systems to emphasize its transition toward security appliances that filtered web traffic for malware using its Security Gateway OS platform. However, the dot-com bubble burst negatively affected both valuation and earnings.
By 2002, Blue Coat concentrated on internet security devices that regulated employee web usage and scanned email attachments. It shut down its Redmond office and introduced new security gateway products featuring user authentication, virus detection, content filtering, and bandwidth optimization.
From 2003 through 2006, Blue Coat grew through acquisitions including Ositis Software (antivirus), Cerberian (URL filtering), Permeo Technologies (endpoint security), and NetApp’s NetCache assets (proxy caching). It also expanded WAN optimization offerings by acquiring Packeteer for $268 million in 2008.
Innovations during this period included launching K9 Web Protection parental control software in 2006 and integrating solutions targeting emerging threats such as spyware and secure remote access. Despite workforce reductions in 2009 due to restructuring, Blue Coat continued expanding via acquisitions like S7 Software Solutions (2010) and Crossbeam Systems (2012).
Leadership transitions saw Michael Borman appointed CEO in 2010 before Greg Clark replaced him in 2011 amid underperformance concerns. In December 2011, private equity firm Thoma Bravo purchased Blue Coat for $1.3 billion.
Further enhancing its security offerings, Blue Coat acquired Solera Networks (big data security) in 2013; Norman Shark (anti-malware) later that year; Elastica (cloud security) in early 2015; and Perspecsys (cloud security) also in 2015. These technologies were integrated into the Global Intelligence Network cloud platform.
In March 2015, Bain Capital acquired Blue Coat for $2.4 billion with intentions to pursue an initial public offering later. The company also introduced the Alliance Ecosystem of Endpoint Detection and Response (EDR) to promote collaborative threat intelligence sharing among vendors.
Blue Coat filed again for an IPO in June 2016 but withdrew after Symantec agreed to acquire it for $4.65 billion. The acquisition finalized on August 1, 2016; Blue Coat’s CEO Greg Clark assumed Symantec’s CEO role while COO Michael Fey became Symantec’s president and COO.
By 2015, Blue Coat reported roughly $600 million in revenue with annual profits near $200 million—demonstrating significant growth from prior years—reflecting a successful evolution into enterprise cybersecurity solutions combining network management with advanced threat defense.
Use by authoritarian governments
Blue Coat products are classified as "dual-use" technologies, functioning both in corporate cybersecurity and governmental internet filtering and monitoring. These devices have the capability to analyze certain encrypted data, restrict access to websites, and log users' online activities.
In October 2011, allegations surfaced that Syria employed Blue Coat technology for internet censorship purposes, prompting an investigation by the U.S. government. The activist collective Telecomix published 54GB of data logs purportedly extracted from seven Blue Coat units in Syria, revealing blocked search queries such as "Israel" and "proxy." Blue Coat later confirmed that its equipment was present in Syria but explained that the sales were made through intermediaries based in Dubai, intended for use by the Iraqi government.
Although these devices transmitted "heartbeat" signals back to Blue Coat, the company maintained it did not track communications on a per-country basis. Subsequently, Blue Coat discontinued software updates and support for devices operating within Syria. In 2013, the Bureau of Industry and Security levied a $2.8 million civil penalty against Dubai-based reseller Computerlinks FZCO for unlawfully exporting Blue Coat products to Syria.
Blue Coat technology was also deployed to restrict internet access in Bahrain, Qatar, and the United Arab Emirates. By 2013, research from Citizen Lab detected Blue Coat equipment across 61 nations, including countries notorious for internet censorship such as China, Egypt, Russia, and Venezuela. Although the precise applications are not fully documented, analysts caution that these tools can facilitate authoritarian regimes in monitoring and suppressing dissent.