Kiteworks

In August 2024, Kiteworks raised US$456 million from Insight Partners and Sixth Street, valuing it at over US$1 billion.

As of 2024, Kiteworks has over 100 million users, across over 3,800 organizations.

In March 2025, Kiteworks received Federal Information Processing Standard (FIPS) 140-3 validation for its cryptographic module, building upon its previous FIPS 140-2 certification. Additionally, its Secure Gov Cloud obtained FedRAMP High Ready status.

Following the company's 2025 acquisition of Zivver [nl], the Dutch investigative journalism outlet Follow the Money raised concerns that sensitive government and corporate data could be exposed under U.S. jurisdiction. Experts noted that several members of Kiteworks’ leadership are former personnel of Israel’s Unit 8200, an elite military intelligence unit, which could present potential security vulnerabilities.

In June 2017, Kiteworks received FedRAMP Authorization for Moderate Level Impact of Controlled Unclassified Information (CUI). It has achieved FedRAMP certification every year since.

In November 2018, Kiteworks released the CISO Dashboard.

In March 2022, Kiteworks was recognized by the Information Security Registered Assessors Program (IRAP) after being evaluated for up to the Protected data classification level.

In August 2022, Kiteworks introduced the Kiteworks Private Data Network, a zero-trust protection and compliance platform for unstructured data communications.

In April 2023, Kiteworks announced that it had achieved Cyber Essentials and Cyber Essentials Plus accreditation, the highest standard for IT security in the United Kingdom. Also, in the same month, it announced that the Kiteworks Private Data Network supports the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF), which allows users to better manage content-based risks.

In February 2024, Kiteworks introduced a feature called SafeEDIT, which is a digital rights management (DRM) technology that enables users to edit various file types natively and share files with third parties using video streaming.

In October 2024, Kiteworks released its AI Data Gateway which allows enterprise employees to use AI technologies while protecting sensitive data, such as personally identifiable information (PII) and intellectual property (IP).

In May 2025, Angelina Apolinar of CyberDefense Magazine, praised Kiteworks hardened virtual appliance architecture and digital rights management (DRM) capabilities that enable collaboration without sharing the original source data.

2020–21 security breaches

In mid-December 2020, the company's File Transfer Appliance product—now a 20-year-old legacy system—was subject to a zero-day exploit, which was patched on December 23. Three additional vulnerabilities were discovered and patched over the next month. The first vulnerability was a SQL injection, allowing an attacker to use a web shell to run arbitrary commands and extract data. The four vulnerabilities were assigned Common Vulnerabilities and Exposures (CVE) codes 2021-27101 through 2021-27104 on February 16, 2021.

Out of approximately 300 total FTA clients, up to 25 appeared to have suffered significant data theft including Kroger, Shell Oil Company, the University of California system, the Australian Securities and Investments Commission, the Reserve Bank of New Zealand, and Singtel. Data stolen included Social Security numbers and other identification numbers, images of passports, financial information, driver's license data, and emails. According to computer security firm FireEye, the attackers comprised two hacking groups: one with ties to "Clop", a ransomware group, and one connected to financial crime group "FIN11". Many victims received extortion emails containing a.onion link to a website containing data dumps of multiple organizations. Prior to the attacks, Accellion had maintained that the FTA was a legacy product nearing the end of its life, with support ending on April 30, 2021, asking customers to move to their Kiteworks system.

In January 2022, Accellion proposed that it would pay an $8.1 million settlement in relation to these breaches, to settle all legal actions against Accellion only. Legal actions against clients impacted by the data breach are separate legal matters.

The company made its seventh acquisition in under five years, with Japanese data transfer and file-sharing provider Wamnet, in August 2026.