Sophos

Private equity firm Thoma Bravo acquired Sophos in 2020 for approximately $3.9 billion and took it private. Under Thoma Bravo's ownership, Sophos has accelerated product integration and cloud migration, shifting from a fragmented suite to a centralized 'Sophos Central' platform. The acquisition followed Thoma Bravo's pattern of buying security software firms and operationalizing them for scale.

Historically, Sophos blends internal development with targeted acquisitions. Notable deals include the 2014 purchase of firewall maker Cyberoam, which added integrated network security, and the 2015 acquisition of SurfRight, which delivered next-generation behavioral detection. More recently, Thoma Bravo has driven smaller bolt-on deals to fold adjacent capabilities into the core platform rather than building from scratch.

Sophos focuses on the mid-market — organizations with 100 to 5,000 employees that lack large security operations centers. Its channel-driven model relies on a network of managed service providers and resellers who bundle Sophos products with their own IT services. This contrasts with enterprise-only peers that sell directly to Fortune 500 CISOs.

No. Sophos is a cybersecurity product company wholly owned by private equity since 2020. It does not manage third-party capital, operate as a fund, or deploy a balance sheet into external investments. It is a portfolio asset of Thoma Bravo, not a capital allocator.

Sophos operates as an independent company within Thoma Bravo's portfolio. Thoma Bravo sets capital allocation priorities and board-level strategy, but Sophos runs day-to-day product development, sales, and security operations under its own executive team. Thoma Bravo's platform team typically supports go-to-market optimization across its cybersecurity holdings.

Sophos MDR is a human-led, AI-assisted service that monitors, detects, and responds to threats 24/7 for organizations lacking in-house security analysts. It leverages telemetry from Sophos endpoint, network, email, and cloud products. This service has become a strategic priority for the firm as SMB demand for outsourced security operations grows.

Sophos is not an allocation destination. It is a portfolio company of Thoma Bravo, meaning institutional limited partners in Thoma Bravo's funds gain exposure to Sophos indirectly. For single family offices, Sophos may appear as a cybersecurity vendor procured to protect the family's operating companies rather than as an investment.