Lumension Security
| Company type | Private |
|---|---|
| Industry | Information technology, Software |
| Founded | January 2017 |
| Headquarters | South Jordan, Utah , United States |
Area served | Worldwide |
| Products | IT Security, IT Service Management, IT Asset Management, Unified Endpoint Management, Identity Management, Patch Management, Supply Chain Management software |
| Owner | Clearlake Capital |
Number of employees | 1800 (2017) |
| Website | www |
Ivanti () is an American IT software firm headquartered in South Jordan, Utah. The company specializes in developing solutions for IT Security, IT Service Management (ITSM), IT Asset Management (ITAM), Unified Endpoint Management (UEM), Identity Management, Patch Management, and supply chain management. Ivanti was established in January 2017 following the combination of LANDESK and HEAT Software, and subsequently expanded its portfolio by acquiring Cherwell Software. The organization gained increased visibility after security breaches involving its VPN equipment.
LANDESK
Founded in 1985 as LAN Systems, the company’s software assets were acquired by Intel in 1991, forming the LANDESK division. LANDESK pioneered the desktop management sector in 1993 and became an independent entity based near Salt Lake City, Utah, in 2002. In 2006, Avocent acquired LANDESK for $416 million. That same year, LANDESK broadened its offerings to include process management and service desk capabilities through LANDESK Service Desk. Private equity firm Thoma Bravo took ownership of LANDESK in 2010.
LANDESK grew through multiple acquisitions: supply chain software provider Wavelink (2012), network vulnerability and patch management company Shavlik (2013), application software developer Naurtech Corporation (2014), data visualization firm Xtraction Solutions (2015), and secure user environment management specialist AppSense (2016).
Lumension Security
Originally established as High Tech Software in 1991 and headquartered in Scottsdale, Arizona, the company rebranded to PatchLink Corporation in 1999. Patrick Clawson assumed the roles of chairman, CEO, and president in 2006, leading to another rebranding as Lumension Security in 2007.
Lumension enhanced its security portfolio by acquiring Securityworks in 2009 and CoreTrace in 2012. Its product lineup competed within endpoint management and security markets against competitors such as Sophos, McAfee, Kaspersky Lab, Symantec, and Trend Micro.
HEAT
HEAT was created in 2015 through the merger of FrontRange Solutions and Lumension Security, focusing on IT Service Management and Endpoint Management software solutions.
Ivanti
In January 2017, Clearlake Capital, owner of HEAT Software, purchased LANDESK from Thoma Bravo. On January 23, 2017, the merger of LANDESK and HEAT Software resulted in Ivanti, a company employing approximately 1,800 people across 23 countries. Ivanti continues to sell products under legacy brand names such as Wavelink supply chain software and the Ivanti patch solution powered by Shavlik technology.
On April 12, 2017, Ivanti acquired Concorde Solutions, a UK-based software asset management company. Later that year, in July 2017, it purchased RES Software, known for automation and identity management tools; this was integrated into Ivanti’s Workspace Manager product line by 2018.
In September 2020, Ivanti announced agreements to acquire US-based Unified Endpoint Management provider MobileIron for $872 million as well as San Jose-based Pulse Secure under undisclosed terms. These deals were finalized by December 1, 2020.
On January 26, 2021, Ivanti revealed plans to acquire Cherwell Software, aiming to strengthen its service and asset management offerings.
On August 2, 2021, Ivanti expanded its patch management capabilities by acquiring RiskSense, a company specializing in risk-based vulnerability prioritization and management.
2021 Pulse Connect Secure Breach
On April 20, 2021, cybersecurity firm FireEye disclosed that threat actors, allegedly linked to the Chinese government, exploited vulnerabilities in Pulse Secure VPN to infiltrate government bodies, defense contractors, and financial institutions across Europe and the United States. The attackers utilized several known security weaknesses along with one previously undisclosed flaw to compromise numerous organizations within the defense industry. The US Department of Homeland Security confirmed these security breaches and advised network administrators to actively search for signs of compromise. In response, Ivanti released an urgent mitigation patch, which was strongly recommended by DHS for immediate deployment. The Cybersecurity and Infrastructure Security Agency required federal civilian entities to adopt protective measures aimed at minimizing the risk of further intrusions. FireEye indicated that some attacks dated back to August 2020 and bore similarities to tactics employed by the Chinese espionage group APT5. Subsequently, CISA identified that at least five federal agencies were compromised among the 24 organizations using Pulse Connect Secure solutions.
Other incidents
In January 2024, it was reported that hackers associated with the Chinese government targeted Ivanti software in an effort to gain access to additional organizations.