Recently the British publisher of cybersecurity solutions Sophos announced through an announcement that it has acquired Capsule8 (a company founded in 2016, based in New York that has developed a software offering for visibility, detection and response to incidents on Linux production servers and containers), for an undisclosed price.
The Capsule8 acquisition is the 2019th acquisition by Sophos, according to Tracxn. Previous acquisitions include Avid Secure Inc. in 2017, Invincea Inc. in 2015, and Surfright in XNUMX.
By beginning its acquisition, Capsule8 had raised $ 30 million in venture capital funding, including a $ 6.5 million round in 2019. Investors include Intel Capital, ClearSky, Bessemer Venture Partners, and Rain Capital.
Sophos is integrating Capsule8 technology into its adaptive cybersecurity ecosystem (ACE) recently released, which provides powerful and lightweight security for Linux servers and cloud containers within of this open platform.
Sophos will also feature Capsule8 technology in its Extended Detection and Response (XDR) solutions, Intercept X server protection products, and Sophos Managed Threat Response (MTR) and Rapid Response services. This will further expand and enhance the Sophos data lake and provide fresh and continuous intelligence for advanced threat hunting, security operations, and customer protection practices.
For those who are unaware of Capsule8, you should know that offers an attack detection platform built for Linux production environments. The service provides discovery to customers, whether they are using software containers, virtualized computers, or bare-metal servers without pre-installed software, and whether they are deployed on premises or in the cloud.
“Today's attackers are incredibly aggressive and agile as they adapt their TTPs to target the easiest, biggest or fastest growing opportunities. As more organizations switch to Linux servers, adversaries have caught on and are adapting and customizing their approaches to attacking these systems.
In addition to the platform, it also replaces multiple legacy controls with a single solution that detects and prevents exploits in real time while preserving the performance and reliability of production infrastructures.
"Sophos already protects more than two million servers for more than 85.000 customers worldwide, and Sophos' server security business is growing at more than 20% annually," said Dan Schiappa, Sophos product manager. “End-to-end server protection is a crucial component of any effective cybersecurity strategy that organizations of all sizes are increasingly focusing on, especially as more workloads move to the cloud. With Capsule8, Sophos offers advanced and differentiated solutions to protect server environments and expands its position as a leading global cybersecurity provider. "
The platform can detect a wide range of cybersecurity attacks: These include malware, memory corruption, new file behavior, unusual application behavior, suspicious interactive shells, container leaks, user area and kernel back doors, and privileged file operations. The platform provides support for all major Linux orchestrators, including Kubernetes, Docker, and CoreOS, and configuration tools like Puppet and Ansible.
Among the notable Capsule8 customers of the best known are, for example, Mimecast, Databricks, ActBlue, Betterment, Bison Trails, Fastly and Snowflake.
"With Capsule8 technology, organizations are no longer forced to choose between system stability and security risk," John Viega, Capsule8 CEO, said in a statement. "Given the growth and mission critical nature of Linux environments and the rapidly changing targeted threat landscape, organizations must be confident that their Linux environments are efficient and secure."
Finally if you are interested in knowing more about it, you can check the details In the following link.