Sophos

Sophos Limited[4] is a British security software and hardware company. It develops and markets managed security services and cybersecurity software and hardware, such as managed detection and response, incident response and endpoint security software.[5][6] Sophos was listed on the London Stock Exchange until it was acquired by Thoma Bravo, an American private equity firm in March 2020.[7]

History

Sophos was founded by Jan Hruska and Peter Lammer and began producing its first antivirus and encryption products in 1985.[8] During the late 1980s and into the 1990s, Sophos primarily developed and sold a range of security technologies in the UK, including encryption tools available for most users (private or business). In the late 1990s, Sophos concentrated its efforts on developing and selling antivirus technology and embarked on a program of international expansion.[9]

In 2010, the majority interest of Sophos was sold to Apax Partners.[10]

In 2011, Utimaco Safeware AG (acquired by Sophos in 2008) was accused of supplying data monitoring and tracking software to partners that have sold to governments such as Syria. Sophos issued a statement of apology and confirmed that it had suspended its relationship with the partners in question and launched an investigation.[11]

In June 2015, Sophos announced plans to raise US$100 million on the London Stock Exchange.[12] Sophos was floated on the FTSE in September 2015.[13]

On 14 October 2019, Sophos announced that Thoma Bravo, a US-based private equity firm, made an offer to acquire Sophos for US$7.40 per share, representing an enterprise value of approximately US$3.9 billion. The board of directors of Sophos stated their intention to recommend the offer to the company's shareholders unanimously.[14] On 2 March 2020, Sophos announced the completion of the acquisition.[15]

In February 2024, President Joe Levy was appointed acting CEO after Kris Hagerman resigned from the CEO position.[16][17] Mr. Levy was named the permanent CEO in May 2024.[18]

In October 2024, Sophos released a report about its Pacific Rim counter-offensive operation, detailing actions taken against China-based adversaries[19] along with additional information concerning this effort.[20] It was reported by Wired that the company had been targeted for years by hackers affiliated with the University of Electronic Science and Technology of China and Sichuan Silence Information Technology, a company associated with China's Ministry of Public Security.[21][22] The attacks were attributed to Chinese advanced persistent threats such as APT41, APT31, and Volt Typhoon.[23] The Federal Bureau of Investigation (FBI) asked for the public's help in identifying the attackers.[23]

Acquisitions and partnerships

In 2003, Sophos acquired ActiveState, a Canadian software company that developed anti-spam software.[24] From September 2003 to February 2006, Sophos served as the parent company of ActiveState, a developer of programming tools for dynamic programming languages: in February 2006, ActiveState became an independent company when it was sold to Vancouver-based venture capitalist firm Pender Financial.[25]

In 2007, Sophos acquired ENDFORCE, a company based in Ohio, United States, which developed and sold security policy compliance and network access control (NAC) software.[26][27]

In July 2008, Sophos agreed to acquire Utimaco, a publicly-held company focused on encryption and other data security products, for over $340 million;[28] the acquisition closed for $314 million in September 2008.[29] In October 2013, Utimaco was divested via a management buyout involving investors PINOVA Capital and BIP Investment Partners.[30]

In May 2011, Sophos announced the acquisition of Astaro, a privately held provider of network security products, headquartered in Wilmington, Massachusetts, USA and Karlsruhe, Germany.[31] At the time Astaro was the 4th largest UTM (Unified Threat Management) vendor and while the deal made sense at the time Forbes questioned its viability.[32] Sophos subsequently renamed the Astaro UTM to Sophos UTM.

In February 2014, Sophos announced that it had acquired Cyberoam Technologies, a provider of network security products.[33]

In December 2015, Sophos merged with Surfright, the company behind the malware scanner HitmanPro. They would later integrate HitmanPro Alert, an anti malicious program designed to detect malicious behavior and stop it into Sophos.[34]

In November 2016, Sophos acquired Barricade, a start-up with a behavior-based analytics engine.[35]

In February 2017, Sophos acquired Invincea, a software company that provides malware threat detection, prevention, and pre-breach forensic intelligence.[36][37][38]

In October 2024, Sophos agreed to acquire SecureWorks, a publicly-held company majority owned by Dell focused on Extended Detection and Response (XDR), for $859 million.[39] The acquisition was completed in February 2025,[40] and was closely followed by a layoff of 6% (or an estimated 400 people) from the combined workforce.[41]

In 2025, Sophos entered into a partnership with the French cybersecurity provider IMS Networks to integrate the Sophos Taegis XDR platform into IMS Networks' security operations centre (SOC).[42] Under the agreement, IMS Networks operates a detection and incident response service on a 24/7 basis from France, using the cloud-native Taegis platform, which originated from Sophos's acquisition of SecureWorks.[42]

See also

• Antivirus software
• Comparison of antivirus software

External links

• Sophos