Skip to main content

Sophos acquires Arco Cyber to add continuous assurance

Companies mentioned

Sophos acquired UK-based Arco Cyber to deliver AI-enhanced cybersecurity governance to an underserved market, providing organizations greater clarity, control and decision-making for managing cyber risk.

The acquisition formed part of Sophos’ stated strategy to strengthen cybersecurity strategy and governance across all levels of maturity through its global partner ecosystem, and to scale CISO capabilities where dedicated security leadership is not present. The company cited a gap in CISO coverage, noting an estimated 359 million organizations worldwide and fewer than 32,000 Chief Information Security Officers.

Sophos CISO Advantage was described as a set of capabilities that combined agentic Artificial Intelligence (AI), integrated platforms and human expertise delivered via MSPs and MSSPs, and that provided real-time insight into control performance while remaining grounded in human oversight and judgment. Arco Cyber added capabilities to continuously validate control effectiveness, map controls to risk and compliance frameworks, and produce executive-ready insight to support decision-making.

Arco Cyber was presented in the release as a cybersecurity assurance company focused on improving security posture while addressing compliance requirements and emerging threats, and its platform and team were identified as complementary additions to Sophos’ existing offerings and partner-delivered services.

“There is no shortage of exemplary security technology in the market,” said Joe Levy, CEO of Sophos.

Sophos said Arco Cyber will join as a dedicated team to advance Sophos CISO Advantage and that its technology and expertise will be integrated into Sophos Central, the platform that delivers Sophos’ advisory services, Managed Detection and Response (MDR) and partner-delivered services.

Press release, provided by Globe Newswire on behalf of Sophos. Read the original.

Graph Connections

1st source this quarter, one of 9 sources referencing Sophos. Previous coverage: MITRE ATT&CK Evaluations Advance Cloud Security and Counter-Espionage Capabilities in Latest Round (December).

  • Itential outlines MCP server design for governed, production tools

    Decision Insights Coverage · April 10, 2026

    Itential says MCP server design should focus on outcomes, curated tools, bounded resources, guardrails, and failure handling for production reliability.

  • Itential outlines AIOps orchestration for autonomous infrastructure

    Decision Insights Coverage · April 10, 2026

    Observability can’t by itself remediate issues in hybrid and multivendor estates; the blog describes AIOps orchestration and closed-loop operations.

  • Cybersecurity Testing Pioneer Bob Walder Joins NSS Labs as Senior Analyst

    Decision Insights Signals · April 10, 2026

    Austin, Texas — March 17, 2026 — NSS Labs today announced that cybersecurity testing pioneer Bob Walder has joined the organization as Senior Analyst, where he will focus on independent research and advising clients on the security implications of artificial intelligence technologies. Walder is widely recognized as the founder of The NSS Group, Europe’s first independent network security testing laboratory, which The post Cybersecurity Testing Pioneer Bob Walder Joins NSS Labs as Senior Analyst appeared first on NSS Labs.