Sophos

Private equity firm Thoma Bravo acquired Sophos in 2020 for approximately $3.9 billion and took it private. Under Thoma Bravo's ownership, Sophos has accelerated product integration and cloud migration, shifting from a fragmented suite to a centralized 'Sophos Central' platform. The acquisition followed Thoma Bravo's pattern of buying security software firms and operationalizing them for scale.

Historically, Sophos blends internal development with targeted acquisitions. Notable deals include the 2014 purchase of firewall maker Cyberoam, which added integrated network security, and the 2015 acquisition of SurfRight, which delivered next-generation behavioral detection. More recently, Thoma Bravo has driven smaller bolt-on deals to fold adjacent capabilities into the core platform rather than building from scratch.

Sophos focuses on the mid-market — organizations with 100 to 5,000 employees that lack large security operations centers. Its channel-driven model relies on a network of managed service providers and resellers who bundle Sophos products with their own IT services. This contrasts with enterprise-only peers that sell directly to Fortune 500 CISOs.

Sophos MDR is a human-led, AI-assisted service that monitors, detects, and responds to threats 24/7 for organizations lacking in-house security analysts. It leverages telemetry from Sophos endpoint, network, email, and cloud products. This service has become a strategic priority for the firm as SMB demand for outsourced security operations grows.