US private equity group Thoma Bravo has closed the acquisition of UK-based cybersecurity company Sophos for $3.9B; the deal was first announced in Oct. 2019
Ron Miller / TechCrunch :
Context & Ripple Effects
Sophos's run as a public company ends where it began on paper: the $125M London IPO in 2015 valued it at $1.6B, and Thoma Bravo's October agreement — now closed at $3.9B — paid more than double that for the UK endpoint-security vendor. The close converts the deal agreed last fall into ownership, taking one of Britain's listed security firms private.
For Thoma Bravo, Sophos is not an isolated bet but the opening move in a security-focused buyout program that later stretched to Proofpoint at $12.3B and Darktrace at $5B, with Imperva already recycled onward to Thales.
First-order effects
- Sophos delists and becomes a Thoma Bravo portfolio company, swapping quarterly public reporting for private-equity ownership at a $3.9B valuation.
- Thoma Bravo locks in control of an endpoint-security franchise it can restructure away from public-market scrutiny, as it later did when Sophos cut 10% of its global workforce in early 2023.
Second-order effects
- The premium exit validates take-privates for listed security vendors, and competitors' boards face the same playbook: Proofpoint and Darktrace both subsequently went to Thoma Bravo rather than strategic buyers.
- PE ownership creates a resale market for security assets — Thales's $3.6B purchase of Imperva from Thoma Bravo shows these positions are built to be flipped to strategics, not held indefinitely.
Third-order effects
- If the pattern holds, European public exchanges keep ceding their strongest cybersecurity listings to US private capital, leaving strategics like Thales to buy those assets back only after PE has captured the value between public and private pricing.
- Consolidation under a small set of financial sponsors concentrates negotiating power across the security M&A market — buyers, sellers, and IPO-hopefuls all end up pricing against what Thoma Bravo paid last time.
The trend: Cybersecurity is consolidating into private-equity portfolios, with Thoma Bravo repeatedly paying premiums to strip listed security vendors from public markets before reselling them to strategics.