StoneFly, Inc. Thirty years of building the thing while everyone else debated it.

There is a certain kind of company that gets built once and then simply keeps going, and StoneFly, Inc. is one of them. It was founded in 1996, in Castro Valley, California - a suburb whose name suggests a golf course more than a storage-array pioneer - and it is still run by the man who founded it. In an industry that treats a five-year lifespan as a respectable innings and an acquisition as a happy ending, that is either stubbornness or conviction. StoneFly would like you to believe it is conviction.

Here is the thing StoneFly figured out early. In March 1996 it registered the domain iSCSI.com. At the time, the idea of running storage traffic over ordinary IP networks - the same plumbing that carries your email - was contested. Storage was supposed to live on expensive, specialized fabric. StoneFly disagreed, and rather than write a white paper about it, the company shipped one of the first iSCSI storage appliances in 2002. The protocol it bet on is now in more or less every data center on earth. Owning iSCSI.com is the corporate equivalent of buying the beach before anyone knew there was an ocean.

What it actually sells

Strip away the acronyms and StoneFly makes boxes that hold data and boxes that copy data somewhere safe. The formal terms are NAS (network-attached storage), SAN (storage area networks), and backup and disaster-recovery appliances. What is genuinely clever is that StoneFly increasingly puts all of it - block, file, and S3 object storage - inside a single "Unified Scale Out" system that automatically shuffles data from fast NVMe flash down to cheaper disk and out to the cloud, depending on how hot it is. Most companies buy three separate systems for that and inherit three separate headaches.

Underneath every appliance sits StoneFusion, the company's patented storage operating system, now in its eighth generation. It is the part customers never see and the part that matters most. StoneFusion is what lets the same software run a small business's file server and a warship's storage array, which brings us to the most quietly remarkable fact about StoneFly.

The submarine problem

StoneFly's storage has been deployed aboard US Navy Littoral Combat Ships and Virginia-class nuclear submarines. This is the sort of sentence a marketing department writes in bold, but it is worth sitting with, because a submarine is a genuinely hostile environment for a computer. There is no data center down the hall, no vendor field engineer arriving within four hours, and no acceptable amount of downtime. Gear that works there is gear that has been engineered to the extremes - and StoneFly's pitch is that the same discipline shows up in the appliance sitting in a suburban hospital's server closet.

The company is a subsidiary of Dynamic Network Factory (DNF), which acquired it around 2006 and gave it a security-and-defense sensibility. That heritage explains a lot. It is why the marquee feature of StoneFly's recent line is not a speed number but a security posture: Air-Gapped Vault, a patented technology that keeps immutable backup copies physically and logically unreachable. The logic is almost aggressively simple. Ransomware can only encrypt what it can touch. So StoneFly builds storage it cannot touch. No detection arms race, no cleverness - just a gap. It is the rare security product whose entire premise is doing less.

The awards, and what they miss

StoneFly has landed on CRN's Storage 100 five times, most recently in 2026, named among the coolest software-defined storage vendors. Trade awards are pleasant but they are not the number that should impress you. The number that should is this: more than 2.5 exabytes of capacity deployed across over 50,000 installations for more than 10,000 customers. That is roughly 2.5 billion gigabytes of other people's data that StoneFly is, at this moment, responsible for not losing. Awards measure cool. Exabytes in production measure trust, and trust is the only currency that matters in storage.

In 2026 the company did what every infrastructure vendor is now doing - it added AI, extending automated threat detection and response across storage, backup, and cloud, and launching a cybersecurity platform called 365GDR. The interesting question is not whether StoneFly can bolt AI onto a storage stack; everyone can. It is whether the additions reduce the number of 3am pages a systems administrator gets. On that, the jury is still out, and StoneFly, to its credit, mostly frames the work in those unglamorous operational terms rather than as a revolution.

None of this makes StoneFly a household name, and it never will be. It sells to the people who keep other people's businesses running - the systems administrators, the IT directors, the backup engineers - and those people do not want excitement. They want the storage to be there in the morning. StoneFly has spent nearly three decades making sure it is, and has been rewarded with the highest compliment its market offers: almost nobody thinks about it. Boring, it turns out, is a business plan.