Verkada

Snapshot

Verkada is what happens when Meraki alumni try to clone the Meraki playbook in physical security: wire power-over-ethernet IP cameras, access-control panels, environmental sensors, intercoms and alarms into a single cloud dashboard called Command, run AI on the edge so the cloud sees metadata rather than raw video, and sell it all through a bottom-up sales motion that climbs from K-12 districts to the Fortune 500. Nine years in, that playbook has produced over 30,000 customers, 91 Fortune 500 logos, 4,700+ customers spending $100K+ annually, and — depending on whose number you trust — somewhere between ~$357M and ~$806M in revenue. It has also produced a 2021 breach that exposed 150,000 camera feeds across Tesla, Equinox, jails, hospitals and schools; a federal CAN-SPAM Act settlement; and a Bloomberg exposé describing an internal culture in which executives used the company's own facial-recognition tools to harass female employees. CapitalG wrote the latest check at a $5.8B valuation in December 2025.

Founding story

Filip Kaliszan, James Ren and Benjamin Bercovitz met at Stanford and built CourseRank, a class-scheduling tool Chegg acquired in 2010. They were not security people. The piece that made Verkada legible to venture is co-founder and executive chairman Hans Robertson, co-founder and COO of Meraki, the cloud-managed networking company Cisco acquired in November 2012 for $1.2B. Robertson gave the founding team the exact playbook that worked at Meraki: build hardware simple enough that an IT generalist can install it, make the cloud dashboard the product, charge per-device annual license, and expand the SKU set from one category into an adjacent one every eighteen months. The first Verkada camera went live at Equinox's Beverly Hills gym in 2017. The company launched publicly on September 21, 2017.

How it works

A Verkada camera has three things most IP cameras don't. First, an on-device SSD that holds 10–120 days of full-resolution footage locally. Second, chipsets that run the analytics on the camera — person and vehicle detection, attribute search (shirt color, backpack), face search, license plate recognition, people counting — so only metadata and still thumbnails go to the cloud. Third, a cloud-mandatory license: the camera is useless without an active Command subscription, because configuration, retrieval and search all live there. Lose the subscription, lose the camera. Command is the browser pane that ties the whole catalog together.

On top of cameras, Verkada has layered access control (AC/AD door controllers plus AX card readers, mobile unlock), environmental sensors (the SV11 catches temperature, humidity, TVOC/CO2 and vape — the vape-detection feature alone sold tens of thousands of units into K-12), intercoms (TD52), alarms (BX/BR with professional monitoring), guest kiosks, and a Mailroom package. A Command Connector appliance pulls third-party RTSP cameras onto Command for brownfield deployments — a reluctant acknowledgement that most enterprises already have cameras they can't throw out.

Product and business overview

Six product lines under one dashboard: cameras, access control, intercoms, environmental sensors, alarms, and guest/mailroom. Verkada pitches a single-vendor cloud stack as replacing a stack of five on-prem vendors — a VMS, an NVR, an access-control server, an alarm panel and a visitor-management kiosk — each with their own hardware, software and maintenance contract.

Business model and pricing

Hardware upfront plus a mandatory Command subscription per device per year. Camera hardware MSRPs run from $899 (CM4) to $4,299 (CP52-E PTZ) per Verkada's published list and Coram.ai's analysis. Camera license runs about $1,099 for five years on a single-sensor camera — roughly $220/year — rising to $1,999–$3,249 for five years on multi-sensor cameras. Access control is roughly $999 per door for five years. Alarms are $600/site/yr for basic coverage, $1,500/site/yr with video alarms. Verkada raised list prices across the catalog effective June 5, 2026. Practitioners on r/videosurveillance consistently describe the all-in run rate as $200–$400 per camera per year, which is a real premium to on-prem alternatives.

Traction over time

GetLatka's and Wikipedia's revenue trace: $130M self-reported in late 2021, ~$357M estimated by GetLatka in mid-2024, ~$806M by 2025 per Wikipedia and secondary trackers. Verkada itself does not publish ARR. Fortune reported at the Series E in February 2025 that Verkada had more than 30,000 customers and 4,700+ large customers spending $100K+ annually, up 43% YoY; 91 Fortune 500 are on the roster. Headcount sits around 2,600 as of November 2025 per LinkedIn trackers (Wikipedia carries a more conservative ~1,700). The 2021 breach exposed customers including Tesla factories, Nissan, Equinox, Cloudflare, Halifax Health ICU and Madison County Jail (AL) — that is the publicly verifiable customer list. A Dubai office opened in 2026, and Verkada signed a Carahsoft partnership in January 2026 to pursue US federal and public-sector sales.

Market analysis

MarketsandMarkets put the VSaaS market at $5.0B in 2024, growing to $10.7B by 2029 at 16.1% CAGR in a May 10, 2024 release. Broader video surveillance (hardware + software + services) sits near $88B by 2024 per Transparency Market Research. Verkada's own cited ~$60B TAM at the Series E (Fortune, Feb 2025) stretches across cameras, access control, environmental sensors and alarms — the sum of the categories it sells into, not the cloud-managed slice. Structural tailwinds are real: the IP-camera replacement cycle rolling off ~2010-vintage installations; the NDAA-driven rip-and-replace of Hikvision/Dahua gear from US federal and critical infrastructure sites; district-level fear around active-shooter events and vaping; and the slow enterprise migration from on-prem VMS to cloud. The main headwinds are the trust tax described below and the price ceiling Chinese ONVIF-compatible systems cost 3–5× less.

Competitive intel

Cisco Meraki MV is awkward: Robertson built Meraki, Cisco bought Meraki, and Meraki's camera line now goes head-to-head with Verkada in the same IT-buyer channel. Motorola Solutions' Avigilon (video) and Alta/Openpath (access) are the biggest enterprise incumbent; Motorola sued Verkada for patent infringement in August 2021, and the ITC cleared Verkada in April 2023. Eagle Eye Networks sells cloud VMS that works with any ONVIF camera — the open counter-pitch to Verkada's walled garden. Rhombus is the smaller clone optimized for SMB, roughly ~$39M revenue per GetLatka. Genetec owns the complex-enterprise and city-surveillance market. Axis Communications is the Swedish hardware incumbent with the most open ecosystem. Hikvision and Dahua dominate globally on price but are barred from US federal use under NDAA 2019. Brivo is the cloud access-control pioneer. HID Global supplies the credentials and readers underneath many of Verkada's competitors.

History and evolution

2016: Founded in Menlo Park. Sept 21, 2017: Public launch; first install at Equinox. April 2019: $40M Series B at $540M (Sequoia). January 2020: $80M Series C at $1.6B (Felicis). October 2020: Vice/IPVM publish the #RawVerkadawgz Slack-channel story — a sales director used the company's own face-search AI on female coworkers in August 2019; after media coverage, three people were fired. March 8, 2021: Hackers calling themselves APT-69420 Arson Cats, fronted by Swiss hacktivist Tillie Kottmann (aka maia arson crimew), found a super-admin credential on an exposed internal subdomain and got about 36 hours of access to approximately 150,000 cameras including Tesla factories, Nissan, Equinox, Cloudflare, jails and hospitals. April 2021: Bloomberg's "bro culture" exposé — COVID parties, loose internal security, "sales athletes" hiring. September 2021: DOJ indicts Kottmann on computer intrusion, wire fraud, conspiracy and aggravated identity theft; Swiss police raid her Lucerne home at US request, no extradition pursued. April 2023: ITC clears Verkada in the Motorola/Avigilon patent fight. October 2023: $305M Series D at $3.2B. September 2024: $2.95M DOJ settlement over CAN-SPAM Act violations (aggressive email marketing). February 19, 2025: $200M Series E at $4.5B (General Catalyst). December 2025: $100M at $5.8B (CapitalG).

What people say

The case for. G2 shows 4.7/5 across 141 reviews, 83% five-star, zero one-star — unusually clean. Buyers rave about install time (minutes instead of days), the absence of an on-prem NVR to maintain, the unified Command dashboard, image quality and the 10-year hardware warranty. Fortune and Crunchbase coverage credit Verkada with turning physical security into an IT-grade product.

The complaints. "Expensive" is the most frequent G2 negative (15 of 141). On Reddit and Spiceworks, practitioners use phrases like "Verkada is Hostage as a Service" and "They are not ONVIF so cannot be used with any other NVR" — a direct reference to cameras bricking when licenses lapse and Verkada's confirmation to IPVM that buyers have no rights to firmware or software after term. Bandwidth strain, tailgating false positives, mobile-only unlock dependencies and privacy concerns around facial recognition all recur. Above all, the 2021 breach fundamentally undermined the pitch that cloud is safe for sensitive video, and the security community still cites it. Verkada's own tested facial-recognition false-positive rate ran 15–85% depending on cohort per Wikipedia; Illinois and Texas restrict the feature outright.

Outlook: the open question

The answer-conditions: Verkada's bull case clears if access control, alarms, intercoms and sensors — the five newer product lines — collectively generate more revenue than cameras within 24 months, proving the Meraki playbook worked and locking customers into a suite they can't rip out. The latest round price (CapitalG at $5.8B) implies the investor base is underwriting that outcome. The bear case: cameras stay the majority of revenue, the ONVIF-friendly cloud alternatives (Eagle Eye, Rhombus plus an insurgent) collapse the price moat, Cisco Meraki aggresses its own camera line into the bottom-up IT channel where Verkada wins, and the 2021 breach continues to disqualify Verkada at exactly the high-value accounts (defense contractors, data centers, hyperscale) where volume concentrates. The CAN-SPAM settlement and the bro-culture reporting are not fatal, but they foreclose certain buyers forever, and competitors already use both in Verkada's accounts.

How to attack it

The exposed wedge is "cloud VMS without the hostage tax." A new entrant that ships ONVIF-native, ONVIF-S-compatible cameras, licenses them perpetually with optional cloud features, and promises that lapsed-subscription means cameras keep recording locally — can take direct aim at the single loudest complaint on every practitioner forum. The AI stack is the easier half: edge NPU chipsets are commodity and open-weights models now match Verkada's analytics on person, vehicle and attribute detection. The hard half is the sales motion — Verkada's IT-channel-plus-ambassador-rep push is fast and expensive. A credible attacker partners with distributors like ADI, Resideo and Scansource that already ship security hardware to integrators and have no exclusivity with Verkada.

Verkada's exposed flanks: (1) the 2021 breach and the bro-culture reporting permanently cap trust with security-first buyers; (2) ONVIF-free walled garden that leaves every Verkada customer one procurement-review away from a competitor pitch; (3) high steady-state ownership cost flagged on every forum; (4) Cisco Meraki's camera line sitting in the same IT reseller channel; (5) China-origin ONVIF hardware (Hikvision, Dahua, Uniview, Reolink) still dominates globally on price and under the new 2026 US tariffs may become even more concentrated in non-US markets. A seed-stage team that picks exactly one of these wedges — probably (1) or (2) — can get to real revenue in enterprise-security channels that resist monolithic clouds.

Adjacent-segment play

The cleanest adjacent is physical security for distributed critical infrastructure: electric utility substations, telecom towers, data-center cold-aisle enclosures, pipeline facilities, water plants. These sites share the problem — IP connectivity exists, on-prem personnel don't — but every one of them has an auditor who will not approve cloud-managed cameras post-2021, and most are NERC-CIP or NIST-regulated. Verkada can't be that product and probably won't try. A dedicated vendor would look like Dragos for cameras — air-gapped, rotating-credentials, on-prem controller, cloud dashboard optional. Kasoni and Dakota are early-stage plays here, but neither has scale.

A second adjacent: retail shrink analytics. Verkada's attribute-search does the detection, but retailers want the full loss-prevention workflow: alert, investigate, case management, prosecution, integration to point-of-sale fraud and ORC (organized retail crime) databases. Everseen and Veesion attack this from AI; a Verkada-adjacent play would own the full stack. A third adjacent, less obvious: worker-safety video for industrial sites — PPE detection, confined-space entry, forklift-and-pedestrian proximity. OSHA liability is rising, Verkada's cameras are almost right but the vertical software is missing. Intenseye, Everguard and Protex AI have raised against this thesis; a camera-native contender is still open.

Sources and further reading

• Verkada — Wikipedia (overview, funding timeline)
• Fortune: Verkada's $200M Series E values company at $4.5B, Feb 19, 2025
• CBS News: Verkada hack exposes 150,000 cameras, Mar 2021
• NBC News: DOJ charges Swiss hacktivist Kottmann, Sep 2021
• Vice: Surveillance startup used own cameras to harass coworkers, Oct 2020
• Bloomberg / Yahoo: 'Bro culture' at Verkada, Apr 2021
• IPVM: Verkada culture and license-lapse reports
• Coram.ai: Verkada pricing analysis
• MarketsandMarkets: VSaaS market size, May 10, 2024