Cisco plans to acquire cybersecurity company Splunk for $157 per share in cash, up 31% on Splunk's September 20 closing price, in a deal valued at ~$28B
- Acquisition is largest deal ever for networking stalwart — Cisco is trying to lessen dependence on one-time sales
Context & Ripple Effects
Cisco's move follows a reported earlier $20B-plus approach to Splunk that did not produce active talks, and a subsequent investment by Hellman & Friedman in the analytics company. It also extends Cisco's longer security-acquisition record, including its purchase of network-security firm Lancope.
The proposed transaction is Cisco's largest acquisition and directly supports its stated effort to reduce reliance on one-time sales by adding a major software and cybersecurity business.
First-order effects
- Splunk shareholders are offered $157 per share in cash, a 31% premium to the September 20 closing price, subject to the deal closing.
- Cisco would add Splunk's data analytics and cybersecurity operations to its portfolio, making this a much larger bet on recurring software revenue than its earlier security purchases.
Second-order effects
- Cisco gains scope to sell networking, security and data-analysis capabilities together, which could push enterprise customers to evaluate more consolidated vendor relationships.
- Network and security rivals may face stronger pressure to demonstrate how their own products integrate with customers' operational and security data, rather than competing on standalone tools alone.
Third-order effects
- If large platform vendors continue buying security-software assets, enterprise security spending could increasingly concentrate around integrated infrastructure providers rather than independent point-product suppliers.
- The deal illustrates a broader shift in which established hardware vendors use acquisitions to reshape their revenue mix toward software; execution and customer adoption will determine whether that shift delivers the intended recurring revenue.
The trend: Infrastructure incumbents are using cybersecurity and analytics acquisitions to move from transaction-driven hardware sales toward integrated, recurring software platforms.