Vendor lineage
Websense and Forcepoint
A reseller that became a filter, then a bubble IPO, then a defence contractor's cyber arm, then private equity again.
Phil Trubey founded NetPartners in Sorrento Valley, San Diego in 1994, reselling other people's network security products. What made the company was the thing it built rather than resold: software for controlling what employees could reach on the internet. It was renamed Websense in June 1999, and in March 2000 - the actual peak of the dot-com bubble - it raised $72M in an IPO whose share price doubled on the first day.
**The founder was not there for it.** In 1998, with $6M of venture funding raised and $6M of annual revenue, the investors removed Trubey from the chief executive's job and appointed John Carrington. The renaming, the IPO and everything after happened without the person who started it - which is common enough to be unremarkable in aggregate and worth naming in the particular.
**What the product actually did is worth stating precisely, because the mechanism explains the criticism.** A category database classifies sites; a policy decides which categories a given user may reach; the enforcement point sits between the user and the web. That is the same architecture as the proxies elsewhere on this timeline, and it has the same unavoidable weakness: **a classification is a judgement, made at scale, by people the affected user will never meet.**
**So the product was called censorware, and the complaint was not baseless.** Over-blocking caught sexual health information, political material and plenty of ordinary sites that fell on the wrong side of a category boundary. That is not a bug that gets fixed; it is the failure mode of the entire approach, and any honest account of web filtering has to say so. The defence is that an employer restricting its own network is a different question from a state restricting a population - but the same product served both, and it usually does.
The company grew by buying capability: PortAuthority in 2006 for data fingerprinting, SurfControl in 2007 for email security, Defensio in 2009 for social spam. **By 2011 Facebook was using it to scan every link posted on the platform**, which is a striking measure of how far a corporate filtering product had travelled from the corporate network.
**Then the ownership carousel, which is the other half of the story.** Vista Equity Partners took it private in 2013 for $906M at $24.75 a share, and moved it from San Diego to Austin. In April 2015 Raytheon - a defence contractor - bought 80% for $1.9B net of cash, contributing its own Raytheon Cyber Products valued around $400M and creating a joint venture worth roughly $2.3B, with Vista keeping the rest. That October it bought Stonesoft and Sidewinder from Intel for $389M, Stonesoft having been McAfee's next-generation firewall. On 14 January 2016 the whole thing was renamed Forcepoint. Raytheon took the remaining 20% in 2019, and in January 2021 sold the company to Francisco Partners.
**Four names, five owners, thirty years.** NetPartners, Websense, Raytheon|Websense, Forcepoint. What the defence-contractor period bought was not technology so much as clearance: government work needs a supplier who can hold it, and a commercial filtering company could not. **The product went where the ownership could take it**, which is a more honest description of most security-industry consolidation than the strategy language used at the time.
2006 PortAuthority Technologies
Data fingerprinting - identifying sensitive content by its shape rather than by rule.
The beginning of the data-loss prevention line that eventually mattered more than the filtering.
2007 SurfControl
A web and email filtering competitor.
Consolidation of the filtering market into fewer hands.
2015 Stonesoft and Sidewinder $389M
Bought from Intel. Stonesoft had been sold as McAfee Next-Generation Firewall.
Forcepoint's firewall line - and another piece of McAfee's estate changing hands, which this timeline records repeatedly.
2015 Foreground Security $62M
Security operations and managed detection.
Services capability alongside the products.
- Wikipedia: founded 1994 as NetPartners in Sorrento Valley, San Diego by Phil Trubey; a reseller before building employee internet-use software; $6M of venture funding and $6M revenue in 1998, when investors replaced Trubey with John Carrington; renamed Websense June 1999; $72M IPO March 2000 with the price doubling on the first day; the ownership chain through Vista, Raytheon and Francisco Partners
- HandWiki: Vista's $906M acquisition in 2013 and the move to Austin in 2014; Raytheon's 80% purchase for ~$1.9B forming Raytheon|Websense; Foreground Security for $62M and Stonesoft with Sidewinder for $389M in October 2015; the 2016 rename
- Grokipedia: the deal closing May 2015 at roughly $2.3B enterprise value with Vista retaining 20%; the rebrand to Forcepoint on 14 January 2016; Francisco Partners ownership from 2021
- SafeLogic: Raytheon's $1.9B net of cash, of which $600M was an intercompany loan to the joint venture, plus Raytheon Cyber Products assets valued at $400M
- Definitions.net summary of the Wikipedia article: the classification-engine and category mechanism, and the censorware criticism - blocking innocent sites and protected speech, whether deliberately as censorship or accidentally through over-reaching categories
A mirror of encyclopedic text rather than a primary source. Used for the criticism as it is commonly stated; the substance is corroborated by the product's own documented category mechanism.
- Forcepoint history summary: PortAuthority in 2006, SurfControl in 2007, Defensio in 2009, and Facebook using the product from 2011 to examine links posted on the platform