Updated:
Sysdig
Sysdig was founded in 2013 by Loris Degioanni, a computer engineer who previously co-created the Wireshark network analyzer.
Sysdig
Sysdig was founded in 2013 by Loris Degioanni, a computer engineer who previously co-created the Wireshark network analyzer. Degioanni built the company on an open-source core — first the sysdig troubleshooting tool and later Falco, a container runtime security project that graduated within the Cloud Native Computing Foundation. While the firm operates as a venture-backed company rather than a family office, its wealth does not derive from a single family. The leadership team includes Chairman Enrique Salem, former CEO of Symantec, and CFO Karen Walker, who previously steered finance at PagerDuty and Uber. Sysdig deploys capital into its own platform and go-to-market infrastructure rather than investing as a fund. Its core product is a cloud-native application protection platform (CNAPP) that emphasizes runtime security across containers, Kubernetes, and cloud workloads. The firm serves enterprise security teams and developers, with geographic reach spanning North America and Europe, where SVP of Engineering Michele Zuccala leads R&D from Milan. Board members include representatives from Accel, Bain Capital Ventures, Premji Invest, Third Point Ventures, and Permira — investors who have backed cybersecurity and infrastructure outcomes. Sysdig's technology is built on open-source foundations, with Falco acting as a de facto industry standard for runtime threat detection. The company has not publicly disclosed its total deployment or staff headcount. In 2025, Sysdig promoted Karen Walker to the Office of the CEO alongside her CFO duties, signaling a unified go-to-market and operations leadership structure. The firm maintains offices in San Francisco, Palo Alto, Burlingame, New York, and Milan. Its board includes Ping Li of Accel, an investor in Tenable and Snyk, and Robert Schwartz of Third Point Ventures, whose past exits include SentinelOne and Apigee. Sysdig publishes the annual Cloud-Native Security and Usage Report, using telemetry from its installed base to benchmark container and cloud security practices. Sysdig's structural differentiator is its open-source anchoring. Unlike proprietary CNAPP vendors, Sysdig built Falco as a community-governed project that graduated within the CNCF, creating an adoption flywheel independent of commercial licensing. This architecture positions Sysdig to embed security into AI coding agents, shifting its interface from a dashboard to programmable, API-first workflows — a bet that security will be consumed through developer tools rather than standalone consoles.
General information
Firm type
Asset Manager
Year founded
2013
AUM
Undisclosed
Location
Region
North America
Country
United States
City
San Francisco
Corporate office
San Francisco, CA, United States
Additional offices
Palo Alto, CA · Burlingame, CA · New York, NY · Milan, Italy
Principals
Loris Degioanni
Chief Technology Officer & Founder
Karen Walker
Chief Financial Officer & Office of the CEO
Enrique Salem
Chairman
Sergej Epp
Chief Information Security Officer
Shantanu Gattani
Vice President of Product Management
Sector focus
Frequently asked questions
Who runs investment and strategic decisions at Sysdig?
CTO and founder Loris Degioanni shares leadership through an Office of the CEO structure with CFO Karen Walker, who joined in 2021 and was elevated in 2025 to oversee go-to-market and operations. Chairman Enrique Salem, a former Symantec CEO and Bain Capital Ventures partner, guides board-level strategy. The board includes representatives from Accel, Premji Invest, Third Point Ventures, and Permira.
How does Sysdig's open-source strategy affect its commercial positioning?
Sysdig created and continues to lead development of Falco, the CNCF-graduated runtime security project that has become an industry standard for container threat detection. This open-source anchor drives adoption among developers and platform teams, creating a pipeline for Sysdig's commercial CNAPP platform. The firm invests engineering resources into both the open-source and commercial offerings, maintaining a single R&D strategy under SVP of Engineering Michele Zuccala.
Which investors back Sysdig, and how does that influence its trajectory?
Sysdig's board includes Ping Li of Accel (also an investor in Snyk and Tenable), Robert Schwartz of Third Point Ventures (whose exits include SentinelOne), Sandesh Patnam of Premji Invest, and Michail Zekkos of Permira. Bain Capital Ventures' Enrique Salem serves as Chairman. This syndicate mixes crossover, growth, and venture capital with deep cybersecurity specialization.
What is a CNAPP and how does Sysdig's approach differ from competitors?
CNAPP stands for cloud-native application protection platform, a category that consolidates multiple security functions — including posture management, workload protection, and threat detection — into a single platform. Sysdig differentiates by building its CNAPP on runtime intelligence rather than static configuration scans, arguing that the highest-fidelity security data originates from live workloads. Its open-source Falco engine provides a community-validated runtime detection layer that competitors must either integrate or replicate.
Does Sysdig publish independent research or threat intelligence?
Yes. Sysdig publishes an annual Cloud-Native Security and Usage Report based on telemetry from its customer base, analyzing real-world container and cloud security patterns. The 2026 edition argues that human-driven security is reaching its limits and that AI-driven defense is emerging as a new operational model.
How does Sysdig see AI changing the security product interface?
Sysdig is investing in what it calls 'headless cloud security' — embedding its CNAPP platform inside AI coding agents like Claude Code rather than requiring a traditional dashboard. The thesis holds that security workflows are shifting from human-operated consoles to programmable, API-first interactions, and that the firm's runtime data architecture positions it to deliver security at machine speed within developer environments.
What is the relationship between Sysdig and Wireshark?
Sysdig founder and CTO Loris Degioanni co-created Wireshark, the open-source network protocol analyzer with over 20 million users, prior to founding Sysdig in 2013. Wireshark and Sysdig are separate projects and entities, but both emerged from Degioanni's focus on deep system introspection and open-source community building.
Profile maintained by Altss using OSINT (open-source intelligence), regulatory filings, licensed data partners, and verified direct submissions. Read the methodology. Last updated: . Continuous refresh with full update cycles at least every 30 days.
Need institutional-grade insight on family offices?
Altss delivers:
Prefer a guided tour?
We’ll walk you through: