EfficientIP - DDI with the security case attached

EfficientIP was founded in France in 2004 and sells what the industry calls DDI - the combination of DNS, DHCP and IP address management, run as one system rather than three. Grouping them is not marketing. Those three services decide what a name resolves to, what address a device receives and which addresses exist at all, and an organisation that manages them separately usually discovers the connection during an incident.

The category is defined by invisibility. Nobody procures address management with enthusiasm, and the three services underneath it are the ones nothing works without: a DHCP scope that exhausts, a DNS zone that goes stale or an address range recorded only in a spreadsheet each produce outages that present as something else entirely.

Its products treat DNS as a security surface rather than only as a directory, which is the substantive position: resolution is both the first step of nearly every connection and a convenient channel for exfiltration and command traffic, so the same appliance that answers queries is well placed to notice the ones that should not exist.

It is also one of the few European vendors holding a serious position in a market otherwise defined by American companies, competing against considerably larger firms. Sovereignty of infrastructure is a live consideration in European procurement, and it is one of the reasons a smaller supplier can keep a place in a consolidated market.