Sophos Acquires Rook Security
June 1, 2019
Sophos (LSE: SOPH) has acquired Rook Security, an Indianapolis-based managed detection and response (MDR) provider founded in 2008, to expand its re-sellable MDR services by combining Rook's threat detection, investigation and incident response capabilities with Sophos' DarkBytes technology. Rook Security was privately owned; Capstone Partners advised Rook and Barnes & Thornburg LLP served as legal counsel. No financial terms were disclosed.
- Buyers
- Sophos
- Targets
- Rook Security
- Industry
- Cybersecurity
- Location
- Indiana, United States
- Transaction Type
- Buyout
Explore More
Related Acquisitions
-
Sophos Acquires SOC.OS
April 22, 2022
Cybersecurity
Sophos has acquired SOC.OS, a UK-based spinout from BAE Systems that provides a cloud-based security alert investigation and triage automation solution. The acquisition will expand Sophos' Managed Threat Response (MTR) and Extended Detection and Response (XDR) capabilities by adding third‑party telemetry ingestion and automated alert clustering and triage.
-
Nightwing Acquires Roka Security
March 27, 2025
Cybersecurity
Nightwing, the intelligence solutions company headquartered in Dulles, Virginia, has acquired Roka Security, a Herndon-based cybersecurity specialist with expertise in infrastructure-as-code, data center operations, secure data transport, and technical training. The deal strengthens Nightwing’s cyber, collection, and communications capabilities for government and commercial clients and enables expanded offerings including Data-as-a-Service.
-
Sophos Acquires Secureworks for $859 Million
February 3, 2025
Cybersecurity
Sophos completed the all-cash acquisition of Secureworks for approximately $859 million, taking Secureworks private and delisting its common stock from Nasdaq. The deal expands Sophos' managed detection and response (MDR) and XDR capabilities by adding Secureworks' Taegis platform, Counter Threat Unit threat intelligence, and security operations teams to Sophos' portfolio.
-
Sophos Acquires Capsule8
July 7, 2021
Cybersecurity
Sophos has acquired Capsule8, a New York–based provider of runtime visibility, detection and response for Linux servers and cloud containers, to strengthen its Adaptive Cybersecurity Ecosystem (ACE). Capsule8's Linux-optimized runtime security will be integrated into Sophos' XDR, Intercept X server products and managed services to expand server and cloud workload protection.
-
Dynatrace Acquires Rookout Ltd.
July 31, 2023
Cloud & SaaS
Dynatrace has acquired Tel Aviv-based Rookout Ltd., a provider of developer-first live debugging and code-level observability for cloud-native applications. The acquisition will integrate Rookout's developer-observability and debugging capabilities into Dynatrace's unified observability and runtime security platform to speed troubleshooting and improve developer productivity. Digital Capital Advisors served as exclusive financial advisor to Rookout and its shareholders.
-
Sophos Acquires Braintrace
July 22, 2021
Cybersecurity
Sophos has acquired Braintrace, a Salt Lake City–based developer of Network Detection and Response (NDR) technology, to enhance Sophos' Managed Threat Response (MTR), Rapid Response and XDR capabilities. Braintrace's engineers and analysts will join Sophos' teams and its NDR technology will be integrated into Sophos' Adaptive Cybersecurity Ecosystem to improve detection, threat hunting and response.
Track M&A activity that matters to you
Get real-time deal alerts, build buyer lists with AI, and access our full acquisition database. Start your free trial today.