British anti-malware powerhouse Sophos has acquired Capsule8 to beef up the Linux protection capabilities to its endpoint detection and response product stack.
Financial terms of the deal were not disclosed.
Capsule8, based in New York, raised $30 million in venture capital investments since launching in 2016. Capsule8’s investors include Intel Capital, Rain Capital, ClearSky and Bessemer Venture Partners.
For Sophos, the Capsule8 technology adds runtime visibility, detection and response for Linux production servers and containers covering both on-premises and cloud workloads.
“Comprehensive server protection is a crucial component of any effective cybersecurity strategy. This deal expands our portfolio of Detection and Response Solutions and Services for underprotected server and cloud environments,” said Dan Schiappa, chief product officer at Sophos.
[ Related: Thoma Bravo to Acquire Sophos for $3.9 Billion ]
Schiappa said the plan is to integrate the Capsule8’s capabilities and technologies into multiple Sophos product lines, including Extended Detection and Response (XDR) solutions, Intercept X server protection products, and Sophos Managed Threat Response (MTR) and Rapid Response services.
In practice, the Capsule8 acquisition gives Sophos new Linux telemetry and event information, beefing up the company’s data lake with additional context for advanced threat hunting and security operations.
Sophos, acquired in 2019 by private equity firm Thoma Bravo in a $3.9 billion deal, has been aggressive on the acquisition front, purchasing several startups including Invincea, Avid Secure and Cyberoam Technologies.
Related: The Battle to Control Enterprise Data Lakes
Related: Sophos to Acquire Invincea for up to $120 Million
Related: Sophos Acquires Network Security Firm Cyberoam Technologies

Ryan Naraine is Editor-at-Large at SecurityWeek and host of the popular Security Conversations podcast series. He is a security community engagement expert who has built programs at major global brands, including Intel Corp., Bishop Fox and GReAT. Ryan is a founding-director of the Security Tinkerers non-profit, an advisor to early-stage entrepreneurs, and a regular speaker at security conferences around the world.
More from Ryan Naraine
- Tenable Launches $25 Million Early-Stage Venture Fund
- VMware Plugs Critical Code Execution Flaws
- GoTo Says Hackers Stole Encrypted Backups, MFA Settings
- Apple Patches WebKit Code Execution in iPhones, MacBooks
- Thoma Bravo to Buy Magnet Forensics in $1.3B Transaction
- T-Mobile Says Hackers Used API to Steal Data on 37 Million Accounts
- Chainguard Trains Spotlight on SBOM Quality Problem
- Exploited Control Web Panel Flaw Added to CISA ‘Must-Patch’ List
Latest News
- Critical Vulnerability Impacts Over 120 Lexmark Printers
- BIND Updates Patch High-Severity, Remotely Exploitable DoS Flaws
- Industry Reactions to Hive Ransomware Takedown: Feedback Friday
- Microsoft Urges Customers to Patch Exchange Servers
- Iranian APT Leaks Data From Saudi Arabia Government Under New Persona
- US Reiterates $10 Million Reward Offer After Disruption of Hive Ransomware
- Cyberattacks Target Websites of German Airports, Admin
- US Infiltrates Big Ransomware Gang: ‘We Hacked the Hackers’
