Network Appliance said this week it intends to buy start-up Decru for US$272 million, giving legitimacy to a small but fast-growing market of storage security products. The move comes on the heels of many high-profile data thefts and losses in the financial services industry and other businesses that have spurred IT shops to begin deploying technology to encrypt archived data, analysts said.
NetApp trumps the industry in what will likely be a rush by other vendors to either buy or create their own storage security technology, said Jon Oltsik, an analyst at Enterprise Strategy Group.
"Other storage companies who really have paid little attention to storage security have to take note now," Oltsik said.
While storage security is about a US$60 million market today, within two years, "you won't be able to have a conversation with a client about storage without talking about security," Oltsik said.
Rich Mogull, an analyst at Gartner, said enterprise-class companies nervous about landing on the front page of newspapers like others with recently publicized data losses have been driving the storage security market over the past six to nine months. The market will be spurred on further with the backing of a large vendor like NetApp.
"There's really only two vendors for encrypting backup tapes and that's Decru and NeoScale," he said.
NeoScale Systems is based in California. Other storage security vendors that play in the disk drive market include Kasten Chase Applied Research in Ontario, and Vormetric in San Jose.
"We just think there's a great market opportunity. Decru ... is clearly the market leader," said NetApp CEO Dan Warmenhoven. "You look at the approach they've taken, and it's incredibly aligned to our own. It's an appliance-based model."
Warmenhoven said he would keep Decru independent and set it up more or less as "an internal OEM to the Network Appliance's sales force and channels, as well as an independent relationship with our traditional competitors. We intend to operate Decru on the other side of a Chinese wall where there won't be poaching of their opportunities by Network Appliance's sales force."
Decru's Data Fort network appliance protects data at rest on disk and tape, as well as data in transit, by using 256-bit AES ciphers to encrypt data as it's being moved from an application server to a disk on a network-attached storage or storage-area network, or to a tape drive. The appliance also manages authentication and secure logging and access controls.
"If anything, this will actually help Decru because it reduces the concerns of working with a small vendor," Mogull said.