Sophos Adds MDR with Rook Security Acquisition

Sophos has acquired Rook Security, combining that company’s threat detection, investigation and response capabilities with its recently acquired DarkBytes technology platform.

The combination creates resellable managed detection and response (MDR) services for roughly 47,000 Sophos channel partners. The acquisition expands Sophos’ portfolio, providing partners with new revenue opportunities without extensive investment in their own tools or expertise, the company said.

Financial details of the transaction weren’t disclosed.

Kendra Krause, Sophos’ vice president of global channels, tells us the acquisition creates a “tremendous opportunity” for partners to expand their current offerings to offer an around-the-clock managed threat detection, investigation and response service.

Sophos’ Kendra Krause

“Organizations need around-the-clock monitoring and management of what’s happening on their networks, yet many don’t have the expertise, can’t keep up or simply don’t have the resources to do so in-house,” she said. “That’s why they’re increasingly looking to partners for help. With Sophos’ combination of Rook Security MDR, the technology platform from the DarkBytes acquisition, and Sophos Intercept X Advanced with EDR technology, partners will be able to sell the best endpoint protection with [around-the-clock] monitoring and with no added costs to the partner.”

Sophos is working closely with partners that sell in many different ways, and for MSSPs that may already offer similar services, Sophos’ MDR offering will be able to augment or expand a new piece of their services, Krause said.

“It’s much faster and more cost-effective for MSSPs to outsource that extra piece they may need with the threat landscape moving so fast,” she said. “For traditional resellers and MSPs, Sophos is providing a much-needed opportunity to provide their customers with real-time threat detection and response without the MSP needing to invest in a SOC or engineering resources.”

MDR is going to be an essential component of the future of how cybersecurity is provided, and Sophos is “committed to arming our partners with everything they need to stay one step ahead,” Krause said.

“Rook Security has an incredibly talented team of security professionals, and shares the same vision as Sophos to constantly innovate and provide the most advanced protection for customers,” she said. “It’s a natural extension of our already strong portfolio, and we’re excited to join forces.”

In addition, Sophos plans to align its synchronized security technology and product portfolio with Rook’s 24/7 services for MDR customers. Rook experts also will be able to review these customer security postures to ensure optimal policy configurations for Sophos products, Sophos said.

“Rook Security worked directly with most clients, but the future Sophos MDR offering will be sold through the Sophos channel,” Krause said.

“Having a turnkey service from Sophos is an important and effective way for us to better protect customers without adding additional overhead,” said Michelle Drolet, CEO and co-founder of Towerwall, a Sophos partner. “With Sophos, we will be able to compete at a higher level and win business that requires 24/7 security management. We’re excited to move into the detection and response category with Sophos’ MDR services.”