Vendor lineage
Conviso - application security, from Brazil
The part of security that has to be argued with developers rather than configured on a device.
Conviso is a Brazilian application-security company, working the discipline that sits furthest from the network devices most of this timeline is about: reviewing code, testing applications, and building secure development practice inside teams that ship software.
Application security is structurally harder to sell than perimeter security because it cannot be installed. A firewall is bought, racked and pointed at a problem; secure development is a change in how people work, negotiated with engineers who already have deadlines, and its success is measured in defects that never reached production.
That measurement problem - proving the value of something that did not happen - is the same one the mail-gateway and policy-management entries in this timeline describe, and it is the reason the whole preventive half of security argues for its budget from a weaker position than the responsive half.
Founded in 2008, it released the first version of what became its platform in 2010. The two-year gap is the interesting part: the consultancy came first and the product was built out of what the consultancy kept having to do by hand.