OXFORD, U.K. — June 3, 2019 —

Sophos (LSE: SOPH), a global leader in network and endpoint security, today announced that it has acquired Rook Security, a pioneer and leader in managed detection and response (MDR) services. Rook Security provides a 24/7 team of cyberthreat hunters and incident response experts who monitor, hunt for, analyze and respond to security incidents for businesses of all sizes. The privately-owned company was founded in 2008 and is headquartered in Indianapolis, Ind.

Sophos is creating re-sellable MDR services by combining Rook Security’s threat detection, investigation and response capabilities with its recently acquired DarkBytes technology platform. As a channel-first, channel-best security provider, Sophos will deliver the new MDR services through its network of approximately 47,000 channel partners worldwide.

“Cybercriminals are relentlessly trying to exploit organizations with techniques ranging from tried-and-true phishing emails to the more recent trend of ‘hacker pen-testing’ to find weaknesses in their surface area. As a result, businesses need 24/7 monitoring and management of what is happening on their network, yet many of them do not have the expertise, can’t keep up or don’t have the security teams in-house to optimally configure and manage security around-the-clock,” said Joe Levy, chief technology officer at Sophos. “With MDR, Sophos’ channel partners will be able to provide businesses of all sizes with expert services that continuously detect, hunt for and respond to security incidents.”

In addition, Sophos plans to align its synchronized security technology and product portfolio with Rook Security’s 24/7 services for MDR customers. Rook Security experts will also be able to review these customer security postures to ensure optimal policy configurations for Sophos products across estates.

“Rook Security provides managed detection and response services to detect and eliminate cyber threats. Through threat hunting and data analytics, Rook Security’s experts rapidly detect and mitigate active attacks,” said J.J. Thompson, founder and CEO, Rook Security. “We are excited to bring our experts and service delivery innovation to Sophos, a global leader in next-generation cybersecurity. Together, we can implement faster, more effective threat detection and response capabilities to better protect businesses.”

Sophos is releasing no further details at this time.

About Sophos

Sophos is a cybersecurity leader protecting 600,000 organisations worldwide with an AI-driven platform and expert-led services. Sophos meets organisations wherever they are in their security maturity and grows with them to defeat cyberattacks. Its solutions combine machine learning, automation, and real-time threat intelligence with frontline human expertise from Sophos X-Ops to deliver advanced, 24/7 threat monitoring, detection, and response.
Sophos offers industry-leading managed detection and response (MDR) alongside a comprehensive portfolio of cybersecurity technologies — including endpoint, network, email, and cloud security, extended detection and response (XDR), identity threat detection and response (ITDR), and next-generation SIEM. Alongside expert advisory services, these capabilities assist organisations in proactively mitigating risk and responding more quickly, with the visibility and scalability required to stay ahead of evolving threats.
Sophos enters the market with a global partner ecosystem, including Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), resellers and distributors, marketplace integrations, and cyber risk partners, offering organisations the flexibility to select trusted relationships when securing their business.  Sophos is headquartered in Oxford, UK. More information is available at www.sophos.com.