Inside the Utah software company that quietly runs the plumbing behind millions of corporate laptops and phones - and learned the hard way what happens when the plumbing springs a leak.
Most people will go an entire career without knowing Ivanti exists. And yet, if you have ever opened a company laptop and watched it force an update, block a sketchy Wi-Fi network, or quietly re-install itself back into policy after you fiddled with a setting, there is a real chance a piece of Ivanti software made that call. It is the kind of company that lives in the walls - the plumbing of corporate IT. You only notice plumbing when it leaks.
Ivanti sells software that helps big organizations do four unglamorous things to the devices their employees use: find them, manage them, secure them, and fix them. Laptops, desktops, phones, servers, the odd warehouse scanner. In the trade this bundle goes by names that could put a room to sleep - unified endpoint management, IT service management, patch management, secure access. Strung together, it is the machinery that keeps a workforce of thousands running without every person needing a technician sitting next to them.
Ivanti is unusual in that it did not really start; it assembled. In January 2017 the private equity firm Clearlake Capital merged two mid-sized IT vendors, LANDESK and HEAT Software, and gave the combination a brand-new coined name. Neither half was young. LANDESK traced back to LAN Systems, founded in 1985, whose products Intel bought in 1991 to form its LANDESK division. HEAT was itself a merger, of FrontRange and Lumension. So the "startup" arrived on day one with three decades of code and customers behind it.
Then it went shopping. Concorde Solutions and RES Software in 2017. MobileIron and Pulse Secure in 2020 - the deal for MobileIron valued at roughly $872 million - which pulled Ivanti into mobile management and zero-trust secure access. Cherwell Software in 2021, adding depth in the help-desk and service-management world. Backers TA Associates and, later, Charlesbank Capital funded the run.
The thread Ivanti now pulls everything onto is a cloud platform called Ivanti Neurons. The marketing language is heavy on "AI-driven, autonomous endpoint management" and "self-healing operations," which, decoded, means a fairly practical idea: a laptop that notices it has drifted out of policy - missing a patch, wrong setting, disabled agent - and quietly corrects itself before a help-desk ticket is ever filed. Underneath sit the parts Ivanti spent years acquiring.
Relative weight of Ivanti's product pillars - illustrative, not to scale.
Ivanti Connect Secure, the VPN gateway it inherited from Pulse Secure, gives remote workers a door into corporate systems. Ivanti Policy Secure checks who and what is knocking before the door opens. Neurons for ITSM handles the tickets and requests that flood any IT department. Patch management does the tedious, essential work of keeping thousands of machines up to date. None of it is thrilling. All of it is the reason a hospital, a bank, or a government agency can hand a laptop to a new hire and trust it.
Ivanti's buyers are CIOs and CISOs - the people who own IT operations and security inside large organizations. The customer base runs to tens of thousands of companies across healthcare, finance, retail, manufacturing, education and government, and the company says it counts a large share of the world's biggest firms among them. Its pitch to all of them is wrapped in a phrase it repeats often: Everywhere Work.
It is a clever piece of positioning, because Ivanti also publishes an annual "Everywhere Work" research report on hybrid work and employee experience - effectively studying the exact trend its software exists to serve. The idea is simple and hard to argue with: people now work from home, the office, the airport lounge and the coffee shop, on a mix of company and personal devices, and someone has to keep all of it running and safe. Ivanti wants to be that someone's control panel.
Then came 2024. Attackers found and actively exploited a chain of zero-day vulnerabilities in Ivanti Connect Secure and Policy Secure gateways. Because those products sit at the edge of corporate networks, the stakes were high: the flaws could be used to bypass authentication and run commands with elevated privileges. In February, the U.S. cyber agency CISA issued an emergency directive ordering federal agencies to act. For a company whose whole promise is security, having your name attached to an emergency directive is close to a worst case.
What followed is the more interesting part of the story. Ivanti shipped patches and mitigations, worked with government agencies on guidance, and made a public commitment to a "secure-by-design" overhaul of how it builds software - the kind of promise that is easy to make and slow to prove. For a business whose product is trust, the episode was both a stress test and a reminder of exactly why anyone pays for this software in the first place.
Ivanti's most awkward rival is also its most obvious: Microsoft, whose Intune and Defender tools ship inside licenses many companies already own. When a competitor bundles a "good enough" version of your product for effectively free, you had better be genuinely better or genuinely broader. Ivanti's answer is breadth - one platform spanning management, service and security, rather than a point tool. It also faces Omnissa (the former VMware Workspace ONE), ManageEngine, Tanium and JAMF on the device side, ServiceNow in service management, and Zscaler, Cisco and Palo Alto Networks on secure access.
The strategic bet underneath all of it is that IT teams and security teams - historically two tribes that barely talk - will increasingly buy together. Ivanti built one platform for both. If that convergence keeps happening, being the vendor already sitting in the middle is a good place to stand.
Ivanti is a private company, backed principally by Clearlake Capital and TA Associates, with Charlesbank also invested. It does not disclose financials, but the model is the familiar enterprise-software one: recurring subscriptions and licenses, sold both directly and through a wide network of resellers and distributors, priced per device and per user, with professional services on top. In January 2025 it changed hands at the top when Dennis Kozak, the former chief operating officer, took over as CEO from Jeff Abbott, who moved to the board.
It is, in that sense, a very clean example of a quiet truth about modern work: an enormous amount of the software running on your office laptop is made by companies you have never heard of, owned by investment firms, doing essential and deeply unfashionable work. Ivanti is one of the clearest cases - a business assembled from a dozen others to manage the one thing every company now has too many of, and understands too little about: devices.