Vendor lineage
Skybox Security - attack paths, and an ending
Modelled how an attacker would traverse the network you documented, and was absorbed by a competitor.
Skybox Security built network modelling and vulnerability-management software whose distinguishing idea was the attack path: rather than listing vulnerabilities by severity, it asked which of them an attacker could actually reach given the network's own topology and rules.
That question is the right one and it is why severity alone is a poor prioritiser - a critical vulnerability on a host nothing can route to is a different problem from a moderate one on a host exposed to the internet. Modelling the path between them requires knowing the topology, the rules and the addresses at the same time, which is why this company sat in the same market as the policy-management vendors.
As of 2026 its domain serves a Tufin page directed at Skybox customers. The entry is kept because the idea outlived the company, and because a vendor's own website is often the first place an acquisition becomes visible to the people who depended on it.
It was founded in 2002 by Eran Reshef and Gidi Cohen, and traded initially under the name SecLucid. The rename is the ordinary kind, but it is worth recording because a company that changes its name early leaves a trail that is easy to lose: the founding year attaches to a name almost nobody remembers.
- skyboxsecurity.com - now a Tufin page welcoming Skybox customers
Fetched 2026-08-11. The company's own domain is the evidence of its absorption, which is a common and underused primary source for this kind of ending.
- Skybox Security was co-founded in 2002 by Eran Reshef and Gidi Cohen; formerly SecLucid; headquartered in San Jose