Island Startup Diligence Report
Proceed only to confirmatory diligence. The public story is strong—large financing rounds, a differentiated enterprise-browser thesis and apparent customer traction—but a $4.8B to $5B valuation should not be underwritten without private ARR, retention, margin, cash, customer, cap-table, technical-security and legal evidence.
Island Startup Diligence Report
Island appears to be a credible, active private unicorn in enterprise browser/security software. Public evidence supports unicorn eligibility, repeated financing step-ups, product breadth, customer-scale claims, FedRAMP-in-process status and patent activity. The main underwriting gaps are financial quality, customer retention/concentration, preferred-equity economics, product displacement proof, competitive durability, security/privacy/legal artifacts and public-sector authorization timing.
Public sources do not disclose audited financials, ARR dollars, gross margin, retention, burn, cash, debt or budget-to-actuals.
Diligence request: Require audited statements, monthly KPI pack, ARR bridge, revenue recognition memo, cohort retention, cash/debt and board plan.
The public valuation rose to $4.8B/$5B, but preferred terms, preferences, option pool, debt and secondary components are private.
Diligence request: Review financing documents, waterfall, pro forma cap table and valuation bridge.
Customer count and stories do not disclose ARR concentration, churn, NRR, renewal history or production depth.
Diligence request: Request top 25 accounts, contract values, renewal/churn cohorts, usage telemetry and independent references.
Island competes with entrenched enterprise platforms and adjacent security categories that can bundle or imitate controls.
Diligence request: Conduct win/loss, pricing, displacement and buyer-reference diligence against Microsoft, Google, SASE/ZTNA, VDI and endpoint vendors.
No public CAC, payback, pipeline conversion, quota capacity, implementation cost or partner-sourced revenue data was found.
Diligence request: Request sales funnel, cohort CAC/payback, pipeline, quota attainment and partner economics.
An enterprise browser strategy can face user-change, compatibility, extension, management and procurement friction.
Diligence request: Validate deployment time, app compatibility, user adoption, support burden and renewal reasons with customers.
AI Protect/Browser/Automate/Publish claims require validation of data flows, model controls, policy enforcement and monitoring.
Diligence request: Request architecture, model/data-flow diagrams, security assessment, red-team results and AI governance control evidence.
FedRAMP Agency Authorization In Process is a progress signal but not authorization; delays could affect government revenue plans.
Diligence request: Confirm sponsor agency, package status, 3PAO work, POA&M, controls and government pipeline dependencies.
Island has strong public financing signals, including multiple valuation step-ups and a 2025 $4.8B Series E, but core financial quality metrics and capital-structure economics are private.
not publicly verifiable confidence: low
No audited annual/quarterly statements, ARR dollars, gross margin, burn, cash/debt or cohort economics were public. Financing announcements disclose valuation and selected scale signals only.
| metric | public status | public evidence | private diligence need |
|---|---|---|---|
| Current ARR dollars | Not disclosed | ARR more than doubled annually language only. | ARR bridge by customer, product and cohort. |
| Gross margin / implementation margin | Not disclosed | No public financial statements. | COGS, cloud/support/services cost and gross margin trend. |
| Cash, debt and burn | Not disclosed | Funding totals only. | Bank statements, debt schedule and runway model. |
| Retention / churn / NRR | Not disclosed | Customer count and stories do not disclose retention. | Cohort GDR/NRR, churn reasons and renewal pipeline. |
| priority | request | why it matters | related risks |
|---|---|---|---|
| High | Audited financials and monthly management accounts FY2022-current. | Underwrites ARR, margin, burn, runway and budget control. | R-001 |
| High | ARR/bookings bridge and retention cohorts. | Tests more-than-doubling ARR claim and revenue durability. | R-001/R-003 |
| High | Cap table, financing documents and waterfall. | Determines common-equity economics behind headline valuation. | R-002 |
| Medium | Tax, insurance, material contracts and commitments. | Surfaces contingent liabilities. | R-009 |
partially verified confidence: medium
CB Insights and financing announcements provide valuation anchors, but no board plan, budget-to-actuals, scenario model or valuation bridge was public.
| event date | event | amount usd m | valuation usd b | public investors or context | diligence implication |
|---|---|---|---|---|---|
| 2022-03-23 | Series B | 115 | 1.3 | Public announcement; CB Insights unicorn date aligns to March 2022. | Early unicorn status requires cap-table and ARR validation. |
| 2023-10-24 | Series C | 100 | 1.5 | Public financing announcement. | Modest valuation step-up from Series B; terms unknown. |
| 2024-04-09 | Series D | 175 | 3 | Public financing announcement. | Large valuation step-up needs ARR/retention proof. |
| 2025-03-26 | Series E | 250 | 4.8 | Public announcement also cited approximately $730M total outside investment. | Latest financing must be reconciled to preferences and ownership. |
| current public list | CB Insights unicorn list | — | 5 | CB Insights row lists investors Insight Partners, Sequoia Capital and Stripes. | Useful market-database anchor, not a formal appraisal. |
Amounts and valuations are public headline figures; security terms are private.
| topic | public signal | missing document | risk link |
|---|---|---|---|
| Latest price/valuation | $4.8B Series E and ~$5B CB Insights valuation. | Series E stock purchase agreement and capitalization waterfall. | R-002 |
| Investor rights/preferences | Not disclosed. | Investor rights, ROFR/co-sale, voting, preference and anti-dilution terms. | R-002 |
| Option pool and dilution | Not disclosed. | Equity plan, option pool, grants, 409A and refresh plan. | R-002/R-011 |
| Debt/secondary | No public debt or secondary detail. | Debt schedule, secondary-sale schedule and board approvals. | R-001/R-002 |
Public headline figures only.
not publicly verifiable confidence: low
Public sources show funding amounts and headline valuations but not ownership, preferences, debt, option pool, investor rights or secondary components.
not publicly verifiable confidence: low
No tax, insurance, material contract economics or off-balance-sheet obligations were public.
| area | public evidence | status | private request |
|---|---|---|---|
| FedRAMP | FR2614439182 Agency Authorization In Process, High, Rev. 5, no authorizations/reuses observed. | Verified public status | FedRAMP package, sponsor, 3PAO, POA&M and timeline. |
| Trust/security | Trust center and legal/privacy pages. | Partially verified public materials | SOC/ISO reports, pen tests, incident logs and customer questionnaires. |
| Contracts | Terms and privacy policies public; customer/vendor contracts private. | Not publicly verifiable | Top customer MSAs, DPAs, SLAs, indemnities and vendor agreements. |
| Insurance/litigation | No complete public schedule. | Not publicly verifiable | Insurance policies, claims, litigation schedule and regulatory correspondence. |
Public materials support an Enterprise Browser core with expanding Enterprise AI and Enterprise Network/SASE positioning. Technical efficacy, deployment depth and customer outcomes remain diligence priorities.
verified confidence: medium
Island publicly describes Enterprise Browser, Enterprise AI and Enterprise Network products, plus use-case solutions for SaaS/web apps, contractors, BYOD, M&A, VDI reduction, zero trust, safe browsing and privileged access.
| product or solution | public description | primary diligence question |
|---|---|---|
| Enterprise Browser | Unified browser environment for enterprise work and governed access. | What customer workflows are replaced, and what is attach/usage depth? |
| Enterprise AI / AI Protect | Visibility, control and protection for AI usage across browser, desktop, extensions and network. | How are prompts/data, models, logging and policies controlled? |
| Enterprise AI / AI Browser and Automate | AI workspace and governed agents embedded into work. | Which customers use AI modules in paid production? |
| Enterprise Network | Modern SASE designed for end users. | What network components are proprietary versus integrated/partnered? |
| Use-case solutions | SaaS/web apps, contractors, BYOD, M&A, VDI reduction, zero trust, safe browsing and PAM. | Which use cases drive ACV, retention and competitive wins? |
| claim area | public support | validation needed | risk ids |
|---|---|---|---|
| Security/browser control | Enterprise Browser pages and patent evidence. | Architecture, policy enforcement tests, bypass testing and customer security reviews. | R-005/R-006 |
| AI governance | AI Protect/Browser/Automate page. | Model/data-flow, prompt logging, DLP, red-team and compliance controls. | R-007/R-009 |
| Network/SASE | Enterprise Network positioning. | Network architecture, uptime, points of presence, SLAs and dependencies. | R-005/R-009 |
| Customer adoption | 450-customer claim and customer stories. | Module attach, active users, renewal cohorts and deployment scope. | R-003/R-006 |
Architecture is inferred from public product positioning and must be validated technically.
Public evidence supports customer traction signals, including 450-customer language and customer-story pages, but top-customer economics, retention and independent references are not public.
partially verified confidence: medium
Island publicly claims 450 customers and publishes customer stories, but does not disclose top customers by ARR, product module, geography or deployment scale.
| signal | public evidence | confidence | diligence caveat |
|---|---|---|---|
| Customer count | 450 customers in 2025 financing announcement. | Medium | Needs active paid customer schedule and ARR reconciliation. |
| Customer stories/logos | Customer stories page and marketing materials. | Medium | Needs logo permission and reference confirmation. |
| Regulated industries | Healthcare, financial services, government, education and retail pages/navigation. | Medium | Needs vertical ARR, compliance requirements and support obligations. |
| Public sector readiness | FedRAMP Agency Authorization In Process, High Rev. 5. | High for status | AIP is not authorization; timing and sponsor details are critical. |
| gap | public status | required evidence | risk ids |
|---|---|---|---|
| Top-customer concentration | Not disclosed | Top 25 customers by ARR, contract end date and product modules. | R-003 |
| Retention / churn | Not disclosed | GDR, NRR, churn cohorts, renewal pipeline and churn reasons. | R-001/R-003 |
| Deployment depth | Not disclosed | Active seats/users, browser default adoption, policy usage and support tickets. | R-006 |
| Customer disputes | Not disclosed | Escalations, credits, SLAs, security questionnaires and dispute schedule. | R-009 |
partially verified confidence: medium
Public pages describe partner and government/public-sector routes, and FedRAMP AIP status is a potential public-sector catalyst.
| route | public signal | private metric needed |
|---|---|---|
| Direct enterprise sales | Schedule demo, request quote and get-in-touch CTAs. | Pipeline conversion, ACV, sales cycle, quota attainment. |
| Customer stories / proof marketing | Customer Stories and case-study navigation. | Reference conversion rate, logo permissions and renewal correlation. |
| Partners / cloud service providers | Partner and cloud service provider partner pages. | Partner-sourced ARR, margins, MDF and conflict rules. |
| Industry and solution pages | Healthcare, financial services, government, education, retail and BPO pages. | Vertical ARR, win rates and compliance cost by segment. |
Risk ratings are analyst judgments from public evidence.
not publicly verifiable confidence: low
No public revenue-by-customer, customer concentration, NRR, churn or cohort retention data was found.
not publicly verifiable confidence: low
No public evidence of significant customer losses was found, but absence from public sources is not proof of absence.
not publicly verifiable confidence: low
No public supplier concentration schedule was found. Product likely depends on cloud, identity, browser, endpoint, AI and security ecosystem integrations, but vendor economics are private.
Island’s differentiated thesis is an enterprise-controlled browser, but public materials place it against entrenched browser, endpoint, identity, SASE/ZTNA, VDI and AI-security vendors.
partially verified confidence: medium
Island spans Enterprise Browser, SASE/network, zero trust, PAM-like workflows, VDI reduction and safe browsing. The breadth increases TAM but creates competition from bundled platform incumbents.
| category | why relevant | example competitor types | diligence test |
|---|---|---|---|
| Enterprise browsers | Island’s core category. | Chrome Enterprise, Microsoft Edge for Business, other secure browsers. | Win/loss against default enterprise browsers and browser-management suites. |
| SASE/ZTNA/network security | Enterprise Network/SASE positioning. | Zscaler, Netskope, Cloudflare, Palo Alto, Cisco. | SASE displacement, integration and pricing evidence. |
| VDI/DaaS and secure access | VDI reduction and contractor/BYOD use cases. | Citrix, VMware/Omnissa, AWS/Azure virtual desktop, identity access platforms. | Cost-savings proof and app compatibility. |
| AI security / governance | AI Protect, AI Browser and governed agents. | DLP, CASB, AI-security startups and productivity suites. | AI module paid adoption and control efficacy. |
| hypothesis | public support | what would confirm | what would disconfirm |
|---|---|---|---|
| Browser as enterprise control plane is differentiated. | Enterprise Browser positioning and relevant patent. | Customers standardize Island as default work browser with strong retention. | Island is used only for narrow contractors or niche apps. |
| AI/network extensions increase ACV. | AI and network product pages. | High paid attach and product-led expansion cohorts. | Low beta usage or bundles included free to defend renewals. |
| Incumbents cannot easily bundle equivalent value. | Broad solutions positioning. | Win/loss and pricing power against Microsoft/Google/SASE incumbents. | Discounting or churn to bundled browser/security suites. |
Competitor placements are analytical, not market-share measurements.
Public materials show direct demo/quote CTAs, customer-story marketing, industry pages and partner routes, but sales productivity and CAC/payback are private.
partially verified confidence: medium
Island uses product-led thought leadership, demo/quote CTAs, industry/use-case pages, customer stories, partners and press/analyst coverage to support enterprise demand generation.
| metric | public status | why needed |
|---|---|---|
| CAC and payback | Not disclosed | Determines growth efficiency and capital intensity. |
| Quota capacity / attainment | Not disclosed | Tests scalability of enterprise sales motion. |
| Pipeline by source | Not disclosed | Validates channel and marketing ROI. |
| Implementation capacity | Not disclosed | Browser replacement may require services/support investment. |
not publicly verifiable confidence: low
Major-customer identities, ARR contribution and renewal status are not public beyond customer-story/logo evidence.
verified confidence: medium
Public routes include demo/quote forms, partners, cloud service providers, industry pages, press/media coverage and customer stories.
not publicly verifiable confidence: low
No public quota capacity, productivity, sales cycle, ACV, discounting, CAC or payback metrics were found.
not publicly verifiable confidence: low
No marketing budget, hiring plan or implementation-capacity data was public.
| area | public signal | missing information | risk ids |
|---|---|---|---|
| Total employees | Approximately 500 employees reported in 2025. | HRIS reconciliation, function/location trend and payroll. | R-011 |
| Product/engineering | 200+ product and engineering employees reported. | R&D org, roadmap ownership and attrition. | R-011/R-007 |
| Hiring | Careers page indicates recruiting activity. | Open roles, acceptance rates, time-to-fill and budget. | R-011 |
| Equity/retention | No public stock-plan detail. | Option pool, grant schedule, retention grants and 409A. | R-002/R-011 |
Island’s reported 200+ product/engineering staff and product expansion into AI/network suggest heavy R&D investment. Roadmap execution, quality and IP ownership require private review.
partially verified confidence: medium
Public financing materials report more than 200 product and engineering employees; public about materials indicate a US/Israel operating footprint, but detailed org structure is private.
| signal | public evidence | diligence need |
|---|---|---|
| Product/engineering staff | 200+ product and engineering employees reported in 2025. | HRIS-supported function/location split and attrition. |
| Product breadth | Browser, AI and Network product families. | Roadmap ownership, release quality and module adoption. |
| IP activity | Patent covering enforcement of enterprise browser use. | Portfolio schedule, assignments and FTO. |
Full org chart and reporting lines are private diligence requests.
partially verified confidence: medium
Public product pages show expansion beyond Enterprise Browser into AI and network/SASE capabilities. Patent records support IP activity around browser-use enforcement.
| roadmap area | public signal | evidence to request |
|---|---|---|
| Enterprise AI | AI Protect, AI Browser, AI Automate and governed agents. | AI roadmap, data-flow diagrams, beta/adoption by customer and security testing. |
| Enterprise Network/SASE | Modern SASE positioning. | Network architecture, uptime, PoPs/partners, SLAs and customer attach. |
| Browser controls/IP | Enterprise browser product and patent evidence. | Patent portfolio, FTO, policy enforcement tests and bypass analysis. |
| record | public evidence | diligence need |
|---|---|---|
| US Patent 12,267,317 | Enforcement of enterprise browser use. | Assignments, prosecution file, claim chart and enforceability analysis. |
| Trademarks/brand | Island and Enterprise Browser branding public. | Trademark schedule and disputes/oppositions. |
| Software/IP ownership | No public complete schedule. | Employee/contractor invention assignments, open-source SBOM and third-party licenses. |
Public materials verify the founders and reported employee scale, but governance, compensation, attrition, stock plans and org depth remain private.
not publicly verifiable confidence: low
No full public org chart was found. Public materials verify founders/senior leaders but not reporting lines below leadership.
| person or body | public role | public evidence | diligence need |
|---|---|---|---|
| Mike Fey | CEO / co-founder | Company materials identify Mike Fey as CEO/co-founder. | Employment agreement, references, board role and succession plan. |
| Dan Amiga | CTO / co-founder | Company materials identify Dan Amiga as CTO/co-founder. | Employment agreement, IP assignment, references and technical leadership bench. |
| Board/investors | Not fully public in diligence sample | CB Insights lists selected investors Insight Partners, Sequoia Capital and Stripes. | Board roster, observer rights, voting/control terms and minutes. |
partially verified confidence: medium
Public materials report about 500 employees and 200+ product/engineering employees, but historical headcount, locations, attrition and hiring plans are not public.
verified confidence: medium
Public materials identify Mike Fey as CEO/co-founder and Dan Amiga as CTO/co-founder. Full executive team, board and employment agreements require private diligence.
not publicly verifiable confidence: low
No public executive or employee compensation arrangements were found.
not publicly verifiable confidence: low
No public option pool, stock plan, refresh grant or exercise data was found.
inconclusive confidence: low
No public employee-relations problems were identified in sampled public sources, but no exhaustive legal/HR review was possible.
not publicly verifiable confidence: low
No public attrition, regretted-loss, hiring or retention metrics were found.
Public materials show legal/privacy pages, FedRAMP AIP status and patent records. Litigation, contracts, security reports, insurance, regulatory correspondence and full IP ownership remain private.
inconclusive confidence: low
Sampled public-source research did not identify a material lawsuit against Island, but this was not an exhaustive docket search.
inconclusive confidence: low
No public company-initiated litigation was confirmed in sampled sources; exhaustive docket review was not performed.
not publicly verifiable confidence: low
As a software company, environmental exposure is likely limited to offices/data-processing vendors, but no public ESG/safety or workers-comp history was reviewed.
partially verified confidence: high
Public patent records verify at least one relevant patent. Full patent/trademark portfolio, assignments, open-source use and FTO are not public.
not publicly verifiable confidence: low
No public insurance schedule was found. Cyber/privacy/E&O coverage is critical for browser, network and AI-control offerings.
not publicly verifiable confidence: low
Public terms, privacy and subprocessor pages exist, but customer MSAs, DPAs, SLAs, indemnities, reseller/cloud agreements and vendor contracts are private.
partially verified confidence: medium
FedRAMP Marketplace shows an Agency Authorization In Process record. No public regulatory enforcement action was identified, but original compliance artifacts were not reviewed.
| ID | Claim | Status | Sources |
|---|---|---|---|
| EC-001 | CB Insights lists Island as a private unicorn. | verified high | SRC-001 |
| EC-002 | Island announced $250M Series E financing at a $4.8B valuation in March 2025. | partially verified medium | SRC-013 |
| EC-003 | Island announced a $175M Series D at a $3B valuation in 2024. | partially verified medium | SRC-014 |
| EC-004 | Island announced a $100M Series C at a $1.5B valuation in 2023. | partially verified medium | SRC-015 |
| EC-005 | Island announced a $115M Series B at a $1.3B valuation in 2022. | partially verified medium | SRC-016 |
| EC-006 | Island was founded in 2020 and emerged from stealth in 2022. | verified medium | SRC-002SRC-017 |
| EC-007 | Island markets an Enterprise Browser product. | verified medium | SRC-003 |
| EC-008 | Island markets Enterprise AI capabilities including AI Protect, AI Browser and AI Automate. | verified medium | SRC-004 |
| EC-009 | Island markets Enterprise Network / SASE capabilities. | verified medium | SRC-005 |
| EC-010 | Island publicly claimed 450 customers and ARR more than doubled annually after stealth. | partially verified medium | SRC-013 |
| EC-011 | Island publishes customer stories and customer-logo marketing evidence. | partially verified medium | SRC-006SRC-007 |
| EC-012 | Island targets regulated and complex workforce use cases. | verified medium | SRC-003SRC-006SRC-022 |
| EC-013 | Island maintains public trust/security materials. | partially verified medium | SRC-008SRC-009SRC-020SRC-021 |
| EC-014 | FedRAMP Marketplace shows Island Enterprise Browser as Agency Authorization In Process, High baseline, Rev. 5. | verified high | SRC-010 |
| EC-015 | Justia and Google Patents list US Patent 12,267,317 for enforcement of enterprise browser use. | verified high | SRC-011SRC-012 |
| EC-016 | Island reported more than 200 product and engineering employees. | partially verified medium | SRC-013 |
| EC-017 | Island reported approximately 500 employees in 2025. | partially verified medium | SRC-013SRC-018 |
| EC-018 | Island identifies Mike Fey and Dan Amiga as co-founders / senior leaders. | verified medium | SRC-002 |
| EC-019 | Island has public careers/recruiting signals. | partially verified medium | SRC-018 |
| EC-020 | Island publishes privacy, terms and subprocessor materials. | verified medium | SRC-009SRC-020SRC-021 |
| EC-021 | Audited financials, ARR dollars, gross margin, burn, cash and debt are not public. | partially verified medium | SRC-001SRC-013SRC-014SRC-015SRC-016 |
| EC-022 | Top-customer ARR, churn, NRR and cohort retention are not public. | partially verified medium | SRC-006SRC-007SRC-013 |
| EC-023 | Island’s positioning overlaps browser, secure access, SASE, VDI-replacement, endpoint and identity-adjacent markets. | verified medium | SRC-003SRC-005SRC-006 |
| EC-024 | Capital structure, investor rights and liquidation preferences are not public. | partially verified medium | SRC-013SRC-014SRC-015SRC-016 |
This report is a public-evidence diligence snapshot, not investment advice. Important financial, legal, technical, and contractual facts remain non-public and should be verified directly with management and primary documents before any investment decision.