Sophos

{{short description|UK security software company}}

{{other uses}}

{{EngvarB|date=May 2021}}

{{Use dmy dates|date=October 2015}}

{{Infobox company

| name = Sophos Limited

| logo = Sophos logo2.svg

| logo_size =

| image =

| image_caption =

| former_name =

| type = Private

| traded_as = {{nowrap |{{LSE was|SOPH}} (2015–2020)}}

| founder = {{unbulleted list|Jan Hruska|Peter Lammer}}

| key_people = {{unbulleted list|Joe Levy|(CEO)}}

| industry = Computer software

| products = Security software

| services = Computer security

| revenue = $1 billion (2023)

| operating_income = US$109 million (2019)

| net_income = US$26.9 million (2019)

| num_employees = 4,400 (2022)

| foundation = {{Start date and age|1987|02|04|df=y}}

| owner = Thoma Bravo

| subsid = Secureworks

| location = Abingdon, England

| homepage = {{Official URL}}

| footnotes = {{cite web|url=https://polaris.brighterir.com/public/sophos/news/rns/story/xe918jr|title=Annual Report 2019|publisher=Sophos|access-date=16 October 2021|archive-date=16 October 2021|archive-url=https://web.archive.org/web/20211016173804/https://polaris.brighterir.com/public/sophos/news/rns/story/xe918jr|url-status=dead}}{{cite news |last=Novinson |first=Michael |url=https://www.bankinfosecurity.com/sophos-to-lay-off-10-workers-amid-shift-to-mdr-services-a-20961 |title=Sophos to Lay Off 10% of Workers Amid Shift to MDR Services |work=Bank Info Sedcurity |date=2023-01-18 |accessdate=2023-11-14 |archive-date=14 November 2023 |archive-url=https://web.archive.org/web/20231114163733/https://www.bankinfosecurity.com/sophos-to-lay-off-10-workers-amid-shift-to-mdr-services-a-20961 |url-status=live }}{{cite web|url=https://news.sophos.com/en-us/2021/06/08/sophos-is-officially-a-great-place-to-work/|title=Sophos is (officially!) a Great Place to Work|date=8 June 2021|access-date=16 October 2021|archive-date=16 October 2021|archive-url=https://web.archive.org/web/20211016173804/https://news.sophos.com/en-us/2021/06/08/sophos-is-officially-a-great-place-to-work/|url-status=live}}

}}

Sophos Limited{{Cite web |date=1987-02-04 |title=Sophos Limited overview - Find and update company information - Gov.uk |url=https://find-and-update.company-information.service.gov.uk/company/02096520 |access-date=2025-02-04 |website=Companies House |language=en}} is a British security software and hardware company. It develops and markets managed security services and cybersecurity software and hardware, such as managed detection and response, incident response and endpoint security software.{{Cite web |last=Fairfield |first=C. J. |date=March 4, 2024 |title=Sophos Exec: Here's How MSPs Can Drive Revenue With Our Products |url=https://www.crn.com/events/here-s-how-msps-can-drive-revenue-with-sophos-products |access-date=2024-03-31 |website=www.crn.com}}{{Cite web |last=Miletic |first=Barbara |date=2023-04-27 |title=Sophos erweitert seinen globalen MDR-Service |url=https://www.it-business.de/sophos-erweitert-seinen-globalen-mdr-service-a-0b85cd3c2ace182aeba467ceff8ea7b8/?cflt=rdt |access-date=2024-03-31 |website=IT-BUSINESS |language=de}} Sophos was listed on the London Stock Exchange until it was acquired by Thoma Bravo, an American private equity firm in March 2020.{{cite web |last=Miller |first=Ron |title=Thoma Bravo completes $3.9B Sophos acquisition |url=https://techcrunch.com/2020/03/02/thoma-bravo-completes-3-9b-sophos-acquisition/ |website=TechCrunch |date=2020-03-02 |access-date=2020-04-07 |language=en-US}}

History

Sophos was founded by Jan Hruska and Peter Lammer and began producing its first antivirus and encryption products in 1985.{{Cite web |last=Cluley |first=Graham |date=4 November 2010 |title=Sophos: the early years |url=https://nakedsecurity.sophos.com/2010/11/04/sophos-early-years/ |archive-url=https://web.archive.org/web/20230930172054/https://nakedsecurity.sophos.com/2010/11/04/sophos-early-years/ |archive-date=30 September 2023 |website=Naked Security}} During the late 1980s and into the 1990s, Sophos primarily developed and sold a range of security technologies in the UK, including encryption tools available for most users (private or business). In the late 1990s, Sophos concentrated its efforts on developing and selling antivirus technology and embarked on a program of international expansion.{{cite web|url=http://windowsitpro.com/security/exterminator-tools|title=Exterminator Tools|date=15 November 1999|publisher=Windows IT Pro|access-date=24 April 2017|archive-date=19 May 2017|archive-url=https://web.archive.org/web/20170519110436/http://windowsitpro.com/security/exterminator-tools|url-status=live}}

In 2010, the majority interest of Sophos was sold to Apax Partners.{{Cite web |last=Hoffman |first=Stefanie |title=Sophos To Sell Majority Stake To Apax Partners {{!}} CRN |url=https://www.crn.com/news/security/224700673/sophos-to-sell-majority-stake-to-apax-partners |access-date=2024-10-22 |website=www.crn.com}}

In 2011, Utimaco Safeware AG (acquired by Sophos in 2008) was accused of supplying data monitoring and tracking software to partners that have sold to governments such as Syria.{{Needs citation|date=October 2024}} Sophos issued a statement of apology and confirmed that they had suspended their relationship with the partners in question and launched an investigation.{{cite web|url=http://www.thebureauinvestigates.com/2011/12/01/british-software-helped-syrian-regime-crush-dissidents|title=The Bureau Investigates article|url-status=dead|archive-url=https://web.archive.org/web/20111204032852/http://www.thebureauinvestigates.com/2011/12/01/british-software-helped-syrian-regime-crush-dissidents/|archive-date=4 December 2011|df=dmy-all}}

In June 2015, Sophos announced plans to raise US$100 million on the London Stock Exchange.{{cite news |url=https://www.wsj.com/articles/sophos-plans-100-million-london-ipo-1433329925 |title=Sophos Plans $100 Million London IPO |newspaper=Wall Street Journal |date=3 June 2015 |last1=Simmons |first1=Jana |access-date=11 March 2017 |archive-date=25 April 2017 |archive-url=https://web.archive.org/web/20170425204650/https://www.wsj.com/articles/sophos-plans-100-million-london-ipo-1433329925 |url-status=live }} Sophos was floated on the FTSE in September 2015.{{cite web|url=https://news.sophos.com/en-us/2015/09/23/sophos-joins-the-uks-top-public-companies-in-the-ftse-250|title=Sophos joins the UK's top public companies in the FTSE 250|date=23 September 2015|access-date=18 January 2020|archive-date=6 August 2020|archive-url=https://web.archive.org/web/20200806021131/https://news.sophos.com/en-us/2015/09/23/sophos-joins-the-uks-top-public-companies-in-the-ftse-250/|url-status=live}}

On 14 October 2019, Sophos announced that Thoma Bravo, a US-based private equity firm, made an offer to acquire Sophos for US$7.40 per share, representing an enterprise value of approximately US$3.9 billion. The board of directors of Sophos stated their intention to recommend the offer to the company's shareholders unanimously.{{cite web|url=https://www.globalcapital.com/article/b1jb6zb934797l/sophos-founders-exit-before-thoma-bravo-sale|title=Sophos founders exit before Thoma Bravo sale|date=5 December 2019|publisher=Global Capital|access-date=25 February 2020|archive-date=25 February 2020|archive-url=https://web.archive.org/web/20200225092633/https://www.globalcapital.com/article/b1jb6zb934797l/sophos-founders-exit-before-thoma-bravo-sale|url-status=live}} On 2 March 2020, Sophos announced the completion of the acquisition.{{cite web|url= https://news.sophos.com/en-us/2020/03/02/sophos-opens-new-chapter-with-take-private-acquisition/amp/|title= Sophos opens new chapter with take-private acquisition|date= 2 March 2020|access-date= 2 March 2020|archive-date= 2 March 2020|archive-url= https://web.archive.org/web/20200302103634/https://news.sophos.com/en-us/2020/03/02/sophos-opens-new-chapter-with-take-private-acquisition/amp/|url-status= live}}

In February 2024, President Joe Levy was appointed acting CEO after Kris Hagerman resigned from the CEO position.{{Cite web |last=Alspach |first=Kyle |title=5 Things To Know About The Sophos CEO Transition |url=https://www.crn.com/news/security/2024/5-things-to-know-about-the-sophos-ceo-transition |access-date=2024-02-28 |website=CRN |archive-date=16 March 2024 |archive-url=https://archive.today/20240316154750/https://www.crn.com/news/security/2024/5-things-to-know-about-the-sophos-ceo-transition |url-status=live }}{{Cite web |last=Alspach |first=Kyle |title=Sophos CEO Kris Hagerman Steps Down, Acting CEO Named |url=https://www.crn.com/news/security/2024/sophos-ceo-kris-hagerman-steps-down-acting-ceo-named |website=CRN |date=2024-02-15 |access-date=2024-09-04 }} Mr. Levy was named the permanent CEO in May 2024.{{Cite web |last=Alspach |first=Kyle |title=Sophos Names Joe Levy As Permanent CEO, Hires New CFO |url=https://www.crn.com/news/security/2024/sophos-names-joe-levy-as-permanent-ceo-hires-new-cfo |website=CRN |date=2024-05-20 |access-date=2024-10-21}}

In October 2024, Sophos released a report about their Pacific Rim counter-offensive operation, detailing actions taken against China-based adversaries{{cite web |last=McKerchar |first=Ross |title=Pacific Rim: Inside the Counter-Offensive—The TTPs Used to Neutralize China-Based Threats |url=https://news.sophos.com/en-us/2024/10/31/pacific-rim-neutralizing-china-based-threat/ |website=www.sophos.com |publisher=Sophos |date=2024-10-31 |accessdate=2025-02-20}} along with additional information concerning this effort.{{cite web |title=Sophos' Pacific Rim: Defense Against Nation-State Adversaries |url=https://www.sophos.com/en-us/content/pacific-rim |website=www.sophos.com |publisher=Sophos |language=en}} It was reported by Wired that the company had been targeted for years by hackers affiliated with the University of Electronic Science and Technology of China and Sichuan Silence Information Technology, a company associated with China's Ministry of Public Security.{{cite magazine |author=Greenberg |first=Andy |author-link=Andy Greenberg |date=2024-10-31 |title=Inside a Firewall Vendor's 5-Year War with the Chinese Hackers Hijacking Its Devices |url=https://www.wired.com/story/sophos-chengdu-china-five-year-hacker-war/ |access-date=November 5, 2024 |magazine=Wired |publisher=}}{{Cite news |date=2021-12-02 |title=Facebook uncovers Chinese network behind fake expert |url=https://www.bbc.com/news/world-asia-china-59456548 |access-date=2024-11-05 |work=BBC News |language=en-GB}} The attacks were attributed to Chinese advanced persistent threats such as APT41, APT31, and Volt Typhoon.{{Cite news |last=Arghire |first=Ionut |date=November 4, 2024 |title=FBI Seeking Information on Chinese Hackers Targeting Sophos Firewalls |url=https://www.securityweek.com/fbi-seeking-information-on-chinese-hackers-targeting-sophos-firewalls/ |access-date=November 10, 2024 |work=Security Week}} The Federal Bureau of Investigation (FBI) asked for the public's help in identifying the attackers.

Acquisitions and partnerships

In 2003, Sophos acquired ActiveState, a Canadian software company that developed anti-spam software.{{Cite web|title = Sophos acquires anti-spam specialist ActiveState|url = https://www.sophos.com/en-us/press-office/press-releases/2003/09/pr_uk_20030924activestate.aspx|website = www.sophos.com|access-date = 2016-01-03|archive-date = 4 March 2016|archive-url = https://web.archive.org/web/20160304102333/https://www.sophos.com/en-us/press-office/press-releases/2003/09/pr_uk_20030924activestate.aspx|url-status = live}} From September 2003 to February 2006, Sophos served as the parent company of ActiveState, a developer of programming tools for dynamic programming languages: in February 2006, ActiveState became an independent company when it was sold to Vancouver-based venture capitalist firm Pender Financial.{{cite web|url=http://www.businesswire.com/news/home/20060222005860/en/ActiveState-Acquired-Employees-Pender-Financial-Group-Company|title=ActiveState Acquired by Employees and Pender Financial Group; Company Renews Focus on Tools and Solutions for Dynamic Languages|date=22 February 2006|publisher=Business Wire|access-date=24 April 2017|archive-date=25 April 2017|archive-url=https://web.archive.org/web/20170425120440/http://www.businesswire.com/news/home/20060222005860/en/ActiveState-Acquired-Employees-Pender-Financial-Group-Company|url-status=live}}

In 2007, Sophos acquired ENDFORCE, a company based in Ohio, United States, which developed and sold security policy compliance and network access control (NAC) software.{{cite web|url=http://www.networkworld.com/article/2302799/lan-wan/sophos-buys-endforce-for-network-access-control.html|title=Sophos buys Endforce for network access control|date=11 January 2007|publisher=Network World|access-date=24 April 2017|archive-date=26 April 2017|archive-url=https://web.archive.org/web/20170426061221/http://www.networkworld.com/article/2302799/lan-wan/sophos-buys-endforce-for-network-access-control.html|url-status=dead}}{{cite news|last1=Wauters|first1=Robin|title=Sophos beefs up on online security, acquires Dutch security software firm SurfRight for $31.8 million|url=http://tech.eu/brief/sophos-surfright/|access-date=2 August 2016|archive-date=29 August 2016|archive-url=https://web.archive.org/web/20160829044820/http://tech.eu/brief/sophos-surfright/|url-status=live}}

In July 2008, Sophos agreed to acquire Utimaco, a publicly-held company focused on encryption and other data security products, for over $340 million;{{cite web |title=Sophos makes move to buy Utimaco |url=https://www.virusbulletin.com/blog/2008/07/sophos-makes-move-buy-utimaco/ |website=Virus Bulletin |date=2008-07-28 |accessdate=2024-10-21}} the acquisition closed for $314 million in September 2008.{{cite web |last=McMillan | first=Robert |title=Sophos concludes $314 million Utimaco buy |url=https://www.networkworld.com/article/802300/lan-wan-sophos-concludes-314-million-utimaco-buy.html |website=NetworkWorld |date=2008-09-30 |accessdate=2024-10-21}} In October 2013, Utimaco was divested via a management buyout involving investors PINOVA Capital and BIP Investment Partners.{{cite web |title=PINOVA Capital and BIP Investment Partners acquire Utimaco Safeware AG in a buyout transaction |url=https://www.corporatenews.lu/en/archives-shortcut/archives/article?article_id=669&author=BIP+Investment+Partners |website=Merkur |date=2013-10-16 |accessdate=2024-10-21}}

In May 2011, Sophos announced the acquisition of Astaro, a privately held provider of network security products, headquartered in Wilmington, Massachusetts, USA and Karlsruhe, Germany.{{Cite web|title=Sophos Acquires Astaro to Meet Demand for Complete, Layered Security Protection|url=https://www.sophos.com/en-us/press-office/press-releases/2011/05/sophos-acquires-astaro.aspx|access-date=2021-07-15|website=www.sophos.com|archive-date=15 July 2021|archive-url=https://web.archive.org/web/20210715093023/https://www.sophos.com/en-us/press-office/press-releases/2011/05/sophos-acquires-astaro.aspx|url-status=live}} At the time Astaro was the 4th largest UTM (Unified Threat Management) vendor and while the deal made sense at the time Forbes questioned its viability.{{Cite web|last=Stiennon|first=Richard|title=Sophos + Astaro: Good companies, bad deal|url=https://www.forbes.com/sites/richardstiennon/2011/05/06/sophos-astaro-good-companies-bad-deal/|access-date=2021-07-15|website=Forbes|language=en|archive-date=20 July 2023|archive-url=https://web.archive.org/web/20230720145139/https://www.forbes.com/sites/richardstiennon/2011/05/06/sophos-astaro-good-companies-bad-deal/|url-status=live}} Sophos subsequently renamed the Astaro UTM to Sophos UTM.

In February 2014, Sophos announced that it had acquired Cyberoam Technologies, a provider of network security products.{{cite web|url=http://www.infosecurity-magazine.com/news/sophos-acquires-cyberoam-to-boost/|title=Sophos Acquires Cyberoam to Boost Layered Defense Portfolio|work=Infosecurity Magazine|date=12 February 2014|access-date=13 May 2016|archive-date=13 May 2016|archive-url=https://web.archive.org/web/20160513191129/http://www.infosecurity-magazine.com/news/sophos-acquires-cyberoam-to-boost/|url-status=live}}

In December 2015, Sophos merged with Surfright, the company behind the malware scanner HitmanPro. They would later integrate HitmanPro Alert, an anti malicious program designed to detect malicious behavior and stop it into Sophos.{{cite web |last=Aldershoff | first=Jan Willem |date=14 December 2015 |title=Company behind anti-malware software HitmanPro sold to Sophos for €30 million |url=http://www.myce.com/news/company-behind-anti-malware-software-hitmanpro-sold-to-sophos-for-e30-million-78087/ |work=MYCE |access-date=1 January 2024 |archive-date=28 October 2021 |archive-url=https://web.archive.org/web/20211028151953/https://www.myce.com/news/company-behind-anti-malware-software-hitmanpro-sold-to-sophos-for-e30-million-78087/ |url-status=live }}

In November 2016, Sophos acquired Barricade, a start-up with a behavior-based analytics engine.{{Cite news |title=Sophos acquires Irish cybersecurity start-up Barricade |url=https://www.irishtimes.com/business/technology/sophos-acquires-irish-cybersecurity-start-up-barricade-1.2851925 |access-date=2024-09-04 |newspaper=The Irish Times |language=en}}

In February 2017, Sophos acquired Invincea, a software company that provides malware threat detection, prevention, and pre-breach forensic intelligence.{{cite web| url=https://www.sophos.com/en-us/press-office/press-releases/2017/02/sophos-adds-advanced-machine-learning-to-its-next-generation-endpoint-protection-portfolio.aspx| title=Sophos Adds Advanced Machine Learning to Its Next-Generation Endpoint Protection Portfolio with Acquisition of Invincea| publisher=Sophos| date=2017-02-08| access-date=2017-02-11| archive-date=23 April 2020| archive-url=https://web.archive.org/web/20200423122234/https://www.sophos.com/en-us/invincea/2017/02/sophos-to-acquire-invincea-to-add-industry-leading-machine-learning-to-its-next-generation-endpoint-protection-portfolio.aspx| url-status=dead}}{{cite web| url=https://blogs.sophos.com/2017/02/08/sophos-grows-anti-malware-ensemble-with-invincea/| title=Sophos grows anti-malware ensemble with Invincea| publisher=Sophos| quote=One may ask, if you already have great next-generation technology, why do you need Invincea’s technology?...Think of Invincea as the superhero that takes our ensemble to the next level – the entity that adds neural network-based machine learning to the team.| date=2017-02-08| access-date=2017-02-11| archive-date=10 February 2017| archive-url=https://web.archive.org/web/20170210000126/https://blogs.sophos.com/2017/02/08/sophos-grows-anti-malware-ensemble-with-invincea/| url-status=live}}{{cite web| url=https://www.invincea.com/2017/02/sophos-to-acquire-invincea-to-add-industry-leading-machine-learning-to-its-next-generation-endpoint-protection-portfolio/| title=Sophos to Acquire Invincea to Add Industry Leading Machine Learning to its Next Generation Endpoint Protection Portfolio| publisher=Invincea| date=2017-02-08| access-date=2017-02-11| archive-date=8 August 2017| archive-url=https://web.archive.org/web/20170808234044/https://www.invincea.com/2017/02/sophos-to-acquire-invincea-to-add-industry-leading-machine-learning-to-its-next-generation-endpoint-protection-portfolio/| url-status=live}}

In October 2024, Sophos agreed to acquire SecureWorks, a publicly-held company majority owned by Dell focused on Extended Detection and Response (XDR), for $859 million.{{cite web |last=Warminsky |first=Joe |title=Sophos to acquire Secureworks for $859 million |url=https://therecord.media/sophos-to-acquire-secureworks-859-million |website=The Record |date=2024-10-21 |accessdate=2024-10-21}} The acquisition was completed in February 2025,{{Cite web |last=Alspach |first=Kyle |date=February 3, 2025 |title=Sophos Closes $859M Acquisition Of XDR Specialist Secureworks |url=https://www.crn.com/news/security/2025/sophos-closes-859-million-acquisition-of-xdr-specialist-secureworks |work=CRN}} and was closely followed by a layoff of 6% (or an estimated 400 people) from the combined workforce.{{cite web |last=Burt |first=Jeffrey |title=Sophos Sheds 6% of Employees After Closing Secureworks Deal |url=https://securityboulevard.com/2025/02/sophos-sheds-6-of-employees-after-closing-secureworks-deal/ |website=Security Boulevard |date=2025-02-13 |accessdate=2025-02-20}}

See also

References

{{reflist}}