Code42

Name: Code42
Brand: Code42

Code42 is a cloud-native insider risk platform (Incydr) that detects and investigates risky data movement and exfiltration across endpoints and cloud collaboration services and accelerates response through integrated workflows and APIs.

Est 2001|Valuation $300M|Raised $138.1M|8 Ref Customers

LinkedIn 28K|Web traffic 16K|FTEs 206|HQ Minneapolis, Minnesota, US

MarketsData Security Platforms

01Competitive Landscape

Top competitor comparison (representative; validate current pricing with vendors)

| Aspect | Code42 (Incydr / Mimecast Incydr) | Teramind | Digital Guardian (Fortra) | |--------|-----------------------------------|----------|---------------------------| | Starting Price | Not publicly listed; sales quote; positioned toward mid-market/enterprise | Public pricing varies by package; often quoted by vendor | Typically enterprise quote-based | | Primary Use Case | Insider risk visibility and investigations tied to file movement and exfiltration | Employee monitoring and broader behavioral analytics | Enterprises requiring policy-heavy DLP with deep content inspection | | Key Strength | Focused visibility into insider-driven file movement and contextual signals; integrations and workflows | Extensive monitoring telemetry and behavioral analytics, including more invasive monitoring features | Comprehensive enterprise DLP capabilities with policy depth and content inspection | | Key Weakness | Public pricing opacity; reported integration gaps; product transitions related to legacy agents and acquisition | Potential for feature overload and privacy/culture tradeoffs due to invasive monitoring features | Can be complex to deploy and manage; higher tuning and operational overhead |

Narrative analysis

Where Code42 appears to perform well - The platform is positioned to provide prioritized alerts and contextual signals related to insider-driven file movement rather than broad surveillance. - The product emphasizes integration with SIEM, IAM, HR, and ITSM systems to support investigations and workflows. Where competitors may be stronger - Some monitoring-focused vendors provide richer endpoint telemetry (for example, screenshots, keystroke collection, or detailed session recording) at the cost of greater privacy and cultural considerations. - Traditional enterprise DLP vendors typically offer broader content inspection, classification, and enforcement controls across more channels. Market adoption signals - The acquisition by Mimecast indicates a strategic interest in integrating insider risk capabilities into a broader human risk management portfolio. - Vendor press materials cite growth metrics, but public, independently verified market-share data was not identified in the reviewed sources.

01Competitive Landscape

Top competitor comparison (representative; validate current pricing with vendors)

Aspect	Code42 (Incydr / Mimecast Incydr)	Teramind	Digital Guardian (Fortra)
Starting Price	Not publicly listed; sales quote; positioned toward mid-market/enterprise	Public pricing varies by package; often quoted by vendor	Typically enterprise quote-based
Primary Use Case	Insider risk visibility and investigations tied to file movement and exfiltration	Employee monitoring and broader behavioral analytics	Enterprises requiring policy-heavy DLP with deep content inspection
Key Strength	Focused visibility into insider-driven file movement and contextual signals; integrations and workflows	Extensive monitoring telemetry and behavioral analytics, including more invasive monitoring features	Comprehensive enterprise DLP capabilities with policy depth and content inspection
Key Weakness	Public pricing opacity; reported integration gaps; product transitions related to legacy agents and acquisition	Potential for feature overload and privacy/culture tradeoffs due to invasive monitoring features	Can be complex to deploy and manage; higher tuning and operational overhead

Narrative analysis

Where Code42 appears to perform well

The platform is positioned to provide prioritized alerts and contextual signals related to insider-driven file movement rather than broad surveillance.
The product emphasizes integration with SIEM, IAM, HR, and ITSM systems to support investigations and workflows.

Where competitors may be stronger

Some monitoring-focused vendors provide richer endpoint telemetry (for example, screenshots, keystroke collection, or detailed session recording) at the cost of greater privacy and cultural considerations.
Traditional enterprise DLP vendors typically offer broader content inspection, classification, and enforcement controls across more channels.

Market adoption signals

The acquisition by Mimecast indicates a strategic interest in integrating insider risk capabilities into a broader human risk management portfolio.
Vendor press materials cite growth metrics, but public, independently verified market-share data was not identified in the reviewed sources.