IT security company Ivanti has acquired enterprise mobile security firm MobileIron for $872M in stock and corporate VPN provider Pulse Secure for an unknown sum
Context & Ripple Effects
Ivanti's double acquisition lands mid-way through a multi-year consolidation run in enterprise security: Imperva paid $140M for DevOps-security firm Prevoty in 2018, Sophos added ML-driven endpoint protection via Invincea for $100M plus an earn-out in 2017, and Avira exited to private equity at a $180M valuation in April 2020. Each deal was a single-capability bolt-on; Ivanti is instead buying two whole product lines at once.
The pairing is deliberate: MobileIron brings unified endpoint management, Pulse Secure brings the corporate VPN, so Ivanti can sell device control and network access as one stack. The move also sets up a direct rivalry with Jamf, which answered five months later with its own $400M Wandera acquisition to push into cloud-based zero trust security.
First-order effects
- MobileIron and Pulse Secure customers now face a single vendor for endpoint management and remote access, with Ivanti able to bundle both into existing IT service-management contracts.
Second-order effects
- Standalone UEM and VPN vendors lose pricing leverage against bundled suites, and Jamf's response — acquiring Wandera to bridge consumer and enterprise zero-trust needs — shows competitors treating Ivanti's combined stack as a direct threat.
- Security buyers get fewer independent alternatives per category, shifting negotiation power toward platform vendors and pressuring point-solution pricing across endpoint and access markets.
Third-order effects
- Consolidating VPN appliances under one vendor concentrates risk: Ivanti itself later warned that threat actors exploited a critical zero-day in its Connect Secure VPN appliance, compromising corporate customer networks — a reminder that merged perimeters create single points of failure.
- If the pattern holds, the standalone VPN category keeps shrinking toward zero-trust architectures, with device-management platforms absorbing network-access functions and regulators and insurers eventually scrutinizing concentrated vendor dependencies.
The trend: Enterprise security is consolidating from point products into bundled platform stacks spanning endpoint management and network access, even as zero trust steadily erodes the VPN those bundles are built around.