Managed cybersecurity and intelligence services provider ReliaQuest to acquire Digital Shadows, which offers threat intelligence services, for $160M
Duncan Riley / SiliconANGLE :
Context & Ripple Effects
ReliaQuest is buying its way up the stack. The managed security provider, which raised $300M led by KKR in 2020 after reporting revenue growth above 450% over three years, is now spending some of that capital on Digital Shadows, whose threat intelligence business maps exposed corporate data across the open and dark web.
The deal follows the template Rapid7 set when it paid $335M for IntSights, and it lands in a market where Digital Shadows' own research keeps stoking demand — the company reported roughly 2.3B files, including credit card and medical data, sitting on publicly accessible storage servers, up 50% year over year.
First-order effects
- Digital Shadows exits as an independent vendor at $160M — less than half what Rapid7 paid for comparable threat intel asset IntSights a year earlier, a data point on how standalone-intel valuations have cooled.
- ReliaQuest's managed service customers gain built-in external threat intelligence, removing a separate procurement decision from their security stacks.
Second-order effects
- Remaining independent threat intelligence vendors face a shrinking buyer pool as platform owners like ReliaQuest and Rapid7 internalize the capability rather than resell third-party feeds.
- Rivals in managed detection must either acquire their own intel source — as Securonix later did with ThreatQuotient — or compete on price against bundles that include it for free.
Third-order effects
- Threat intelligence is structurally shifting from a standalone product category to an embedded feature of managed security services, with acquisition premiums compressing accordingly.
- If bundling continues, the market consolidates around a handful of platform owners who control both the monitoring relationship and the intelligence layer, squeezing pure-play vendors toward niche verticals or exit.
The trend: Standalone threat intelligence vendors are being absorbed into managed security platforms, turning external-exposure monitoring from a product you buy into a feature you get.