Ubiquiti - enterprise features at prosumer prices

Almost every other company in this section is defined by its channel: the resellers, the distributors, the authorised partners, the certified engineers. Ubiquiti's own annual report states the opposite in a single line - it does not employ a traditional direct sales force. Awareness comes from reviews, from distributors, and from a user community that talks directly to the engineering and support teams.

That is not a marketing preference; it is where the price comes from. The margin that would pay a sales organisation is taken out of the cost instead, which is how radios and access points arrive at figures a small operator can afford. Robert Pera, formerly an engineer at Apple, started the company in 2005 with his own savings and pointed it at the places carriers had skipped.

The result is visible in the filings: more than seventy million devices shipped across more than two hundred countries. The wireless internet providers that connect rural and underserved areas were built on this equipment, and the controller model - a network you administer from one piece of software rather than device by device - arrived at small-business prices while the same idea was still an enterprise line item elsewhere.

The company is also the setting for the clearest insider case in recent memory, and it is worth knowing precisely because the numbers are counterintuitive. In 2021 an engineer paid close to a quarter of a million dollars a year stole tens of gigabytes of data, demanded a ransom of 1.9 million dollars, and published the data when refused. He was sentenced to six years.

The theft was not the expensive part. Remediation cost the company over 1.5 million dollars. Then the same man posed as a whistleblower and planted false reports of a breach he had himself committed - and within a single day the share price fell far enough to remove more than four billion dollars of market value. The false account of an incident did over two and a half thousand times the damage of the incident itself.

Two things follow for anybody who defends a network. The attacker was the person paid to secure it, which no perimeter addresses. And his account of what happened, offered while he was helping to investigate it, was believed long enough to matter - so the record of who did what, kept where the insider cannot reach it, is not an audit formality. It is the only thing that separates an incident from a story about an incident.