Welcome reader to your CybersecurityHQ report

Brought to you by:

Cypago - Enterprise-grade Cyber GRC Platform

Cypago enables strategic decision making through a full Cyber GRC product suite to help you avoid business reputation impact, financial or client trust losses

—

Thoma Bravo's Cybersecurity Empire

Thoma Bravo has solidified its position as a dominant force in the cybersecurity industry through strategic investments and acquisitions. Specializing in software and technology, the private equity firm has built an extensive portfolio of cybersecurity companies, significantly shaping the industry's landscape and driving innovation.

History of Thoma Bravo and Its Founders

Thoma Bravo is one of the largest private equity firms in the world, specializing in software and technology-enabled services. It has gained recognition for its pioneering work in private equity, particularly in the software sector, transforming it into a leader in this space. The firm's history is rooted in innovation, strategic investments, and a legacy of excellence.

Founding and Early Years

Thoma Bravo traces its origins back to 1980, when it was established as Golder Thoma & Co. in Chicago, Illinois. The firm was co-founded by Stanley Golder and Carl Thoma, who were pioneers in applying the "consolidation" or "buy-and-build" investment strategy. This approach focuses on acquiring multiple businesses in a fragmented industry and combining them into a more efficient, unified company.

• Stanley Golder: Often regarded as one of the forefathers of private equity, Golder worked at First Chicago Bank before venturing into private equity. His innovative thinking set the stage for the development of modern buyout strategies.

• Carl Thoma: Known for his deep expertise in private equity, Thoma had a vision of using acquisitions to create scalable businesses. He became instrumental in the firm's focus on consolidating fragmented industries.

In 1998, Carl Thoma partnered with Orlando Bravo, a Harvard Business School graduate with a keen interest in technology and operational efficiency. Bravo's strategic focus on the software industry laid the foundation for Thoma Bravo's current specialization.

Becoming Thoma Bravo

The firm officially adopted the name Thoma Bravo in 2008, reflecting the partnership between Carl Thoma and Orlando Bravo. Under Bravo’s leadership, the firm pivoted to focus on investing in software and technology companies, a move that proved transformative. By recognizing the untapped potential in software, Thoma Bravo positioned itself ahead of its competitors in this niche market.

• Orlando Bravo: Often referred to as the "Software King of Private Equity," Bravo has driven the firm's meteoric rise in the software sector. His hands-on approach, focus on operational improvements, and ability to scale acquired companies have become hallmarks of the firm’s success.

Growth and Expansion

Thoma Bravo's strategy involves acquiring established, high-performing software companies, enhancing their operations, and often exiting at significant profit margins. The firm has focused on sectors like cybersecurity, financial technology, enterprise software, and SaaS.

Over the years, Thoma Bravo has:

• Raised multi-billion-dollar funds, with its assets under management (AUM) exceeding $130 billion by 2024.

• Completed over 400 software-related transactions with an aggregate value surpassing $300 billion.

• Acquired marquee companies such as SolarWinds, SailPoint, Sophos, Proofpoint, and Dynatrace.

Understanding Thoma Bravo's Investment Strategy

Thoma Bravo's investment strategy centers on identifying and nurturing high-potential cybersecurity firms. The firm seeks companies with robust technologies, strong market positions, and significant growth prospects. By infusing capital and providing strategic guidance, Thoma Bravo aims to enhance these companies' operational efficiencies and market reach.

A key aspect of this strategy is the focus on businesses that offer essential security infrastructure solutions. Thoma Bravo targets firms that address critical cybersecurity needs, such as identity and access management, threat detection, data protection, and secure communications. This approach ensures that their investments are not only financially rewarding but also pivotal in advancing the cybersecurity industry's capabilities.

Key Strategies

1. Buy-and-Build: Thoma Bravo has used its founders’ buy-and-build strategy to consolidate fragmented software markets and create market leaders.

2. Operational Excellence: The firm is known for its ability to optimize operations post-acquisition, driving profitability and growth.

3. Long-Term Vision: Thoma Bravo often invests with a long-term perspective, focusing on sustainable value creation rather than quick exits.

The Role of Private Equity in Cybersecurity

Private equity firms like Thoma Bravo play a crucial role in the cybersecurity sector by providing the necessary funding and resources for companies to scale their operations and innovate. Thoma Bravo's investments enable cybersecurity firms to accelerate research and development, expand globally, and enhance their product offerings to stay ahead of evolving cyber threats.

Beyond financial support, Thoma Bravo offers strategic expertise, operational improvements, and access to a broad network of industry contacts. This holistic support helps portfolio companies navigate complex market dynamics, regulatory environments, and technological advancements, positioning them for long-term success.

Thoma Bravo's Key Acquisitions

Thoma Bravo's portfolio includes a diverse range of cybersecurity companies, each contributing to its comprehensive suite of security solutions.

• Entrust: Acquired in 2009, Entrust offers identity-based security solutions that secure digital identities and information.
  

• SonicWall: Acquired in 2010 and later sold to Dell in 2012, SonicWall specializes in network security and data protection.
  

• LANDesk: Acquired in 2010 and later merged with HEAT Software to form Ivanti, a company providing IT management and security solutions.
  

• Tripwire: Acquired in 2011, Tripwire provides cybersecurity and compliance solutions, focusing on threat detection and risk management.
  

• DigiCert: Thoma Bravo acquired DigiCert in 2015, a leading provider of scalable TLS/SSL and PKI solutions for identity and encryption.
  

• Imprivata: Purchased in 2016 for $544 million, Imprivata provides authentication and access management solutions for the healthcare industry.
  

• Ping Identity: Initially acquired in 2016 and taken public in 2019, Thoma Bravo agreed to take Ping Identity private again in 2022 in a deal valued at $2.8 billion. Ping Identity provides intelligent identity solutions for enterprise clients.
  

• Bomgar: Acquired in 2016, Bomgar (now BeyondTrust) provides privileged access management solutions.
  

• Continuum: Acquired in 2017, Continuum provides MSPs with an integrated IT management platform, including cybersecurity solutions.
  

• Imperva: Acquired in 2018 for $2.1 billion, Imperva offers cybersecurity solutions that protect data and applications in the cloud and on-premises.
  

• Veracode: Acquired in 2018 for $950 million, Veracode is a prominent provider of application security testing solutions. Veracode helps organizations detect and fix security vulnerabilities in software applications.
  

• Barracuda Networks: Purchased in 2018 for $1.6 billion, Barracuda offers a wide range of security products, including email protection, network security, and data protection solutions.
  

• ConnectWise: Acquired in 2019, ConnectWise provides software for managed service providers (MSPs), including cybersecurity solutions that help MSPs protect their clients.
  

• Idaptive: Purchased in 2019, Idaptive offers identity and access management solutions, later merging with Centrify to form Delinea.
  

• Sophos: Purchased in 2020 for $3.9 billion, Sophos specializes in endpoint security and network protection.
  

• Venafi: Thoma Bravo invested in Venafi in 2020, a company specializing in machine identity management.
  

• Exostar: Thoma Bravo acquired a majority stake in Exostar in 2020, a company that provides secure collaboration solutions for highly regulated industries.
  

• Illumio: Thoma Bravo led a $225 million funding round for Illumio in 2021, valuing the company at $2.75 billion. Illumio specializes in zero-trust segmentation, helping organizations prevent the spread of breaches inside data centers and cloud environments.

• Proofpoint: Acquired in 2021 for approximately $12.3 billion, Proofpoint is a leading provider of email and cloud security solutions.

• Exabeam: In 2021, Thoma Bravo invested $200 million in Exabeam, a security information and event management (SIEM) company that uses machine learning to detect cyber threats.

• McAfee's Enterprise Business: In 2021, Thoma Bravo, in partnership with STG, acquired McAfee's enterprise security business for $4 billion.

• AppOmni: Thoma Bravo invested in AppOmni in 2021, a SaaS security management company that helps enterprises secure their cloud applications.

• SailPoint: In 2022, Thoma Bravo took SailPoint private in a deal valued at $6.9 billion. SailPoint is a leader in identity and access management (IAM).

• ForgeRock: In 2022, Thoma Bravo announced plans to acquire ForgeRock, a leader in digital identity solutions, for approximately $2.3 billion.

• Intel 471: Thoma Bravo invested in Intel 471 in 2022, a company specializing in cyber threat intelligence.

• Darktrace: Thoma Bravo completed its acquisition of Darktrace on October 1, 2024, in an all-cash deal valued at approximately $5.3 billion.

These acquisitions and investments have allowed Thoma Bravo to assemble a robust and diversified cybersecurity portfolio, addressing various aspects of digital security.

The Impact of Thoma Bravo on the Cybersecurity Industry

Thoma Bravo's aggressive investment strategy has significantly impacted the cybersecurity industry, influencing market dynamics and spurring technological advancements.

Changes in Market Dynamics

Thoma Bravo's substantial investments have led to increased consolidation within the cybersecurity sector. By acquiring numerous companies, the firm has enabled the integration of complementary technologies, creating more comprehensive security platforms. This consolidation pressures competitors to innovate and expand their offerings to remain competitive.

The firm's actions have also attracted more private equity interest in cybersecurity, increasing capital flow into the industry. This influx of investment has accelerated growth and heightened the focus on developing advanced security solutions.

Influence on Cybersecurity Innovation

Thoma Bravo's emphasis on innovation has propelled its portfolio companies to the forefront of technological advancements. By supporting research and development, these companies have introduced cutting-edge solutions that address emerging threats.

For example:

• Illumio's Zero Trust Segmentation: Helps prevent the spread of breaches by controlling communications within and across data centers and cloud environments.

• Exabeam's Use of Machine Learning: Enhances threat detection by analyzing user and entity behavior to identify anomalies.

• AppOmni's SaaS Security Management: Provides deep visibility and security management for SaaS applications, a critical need as organizations adopt more cloud services.

These innovations not only improve the security posture of their clients but also set new industry standards, pushing the entire sector forward.

Evaluating the Success of Thoma Bravo's Cybersecurity Portfolio

Assessing the effectiveness of Thoma Bravo's investments involves examining the financial performance of acquired companies and their competitive positions in the market.

Financial Performance of Acquired Companies

Many of Thoma Bravo's cybersecurity investments have yielded strong financial returns. For instance:

• Proofpoint: After its acquisition, Proofpoint continued to grow its revenue by expanding its customer base and enhancing its product suite.

• Sophos: Under Thoma Bravo's ownership, Sophos invested in product development and sales expansion, leading to increased revenues.

• Veracode: Achieved significant growth by focusing on application security testing, a rapidly growing market segment.

Successful exit strategies, such as public offerings and profitable sales, further demonstrate the firm's ability to enhance the value of its investments.

Market Position and Competitive Advantage

Thoma Bravo-backed companies often hold leading positions in their respective niches:

• SailPoint: Recognized as a leader in IAM, serving a global clientele across various industries.

• Imperva: Maintains a strong position in data and application security, trusted by enterprises worldwide.

• Barracuda Networks: Known for its comprehensive security solutions for small and medium-sized businesses.

The competitive advantages of these companies stem from enhanced product offerings, expanded global reach, and the ability to innovate rapidly—all facilitated by Thoma Bravo's strategic support.

Future Prospects for Thoma Bravo in Cybersecurity

As cyber threats continue to evolve, Thoma Bravo is well-positioned to address emerging challenges and capitalize on new opportunities.

Potential Challenges and Opportunities

Challenges:

• Evolving Threat Landscape: The increasing sophistication of cyber attacks requires continuous innovation.

• Regulatory Compliance: Adapting to global regulations on data privacy and security can be complex.

• Market Competition: The cybersecurity market is crowded, with numerous startups and established players.

Opportunities:

• Growing Demand: The rise in remote work and digital transformation heightens the need for robust cybersecurity solutions.

• Innovation in AI and Machine Learning: Advancements in these areas offer new ways to detect and prevent cyber threats.

• Cloud Security Expansion: As organizations migrate to the cloud, there is a significant opportunity for solutions that secure cloud environments.

Strategic Plans for Growth and Expansion

Thoma Bravo plans to continue its strategy of investing in and acquiring companies that offer innovative cybersecurity solutions. The firm aims to:

• Expand Global Reach: Grow the international presence of its portfolio companies to meet global cybersecurity needs.

• Foster Collaboration: Encourage synergy among its portfolio companies to create integrated solutions.

• Invest in Emerging Technologies: Focus on companies specializing in AI, machine learning, and cloud security.

• Support Scalability: Help companies build scalable solutions that can adapt to the evolving size and complexity of their clients' operations.

By pursuing these strategies, Thoma Bravo seeks to maintain its leadership position and continue driving advancements in the cybersecurity industry.

Conclusion

Thoma Bravo's impactful investments and strategic vision have significantly transformed the cybersecurity sector. By building a diverse portfolio of leading cybersecurity companies, the firm has enhanced innovation, influenced market dynamics, and strengthened the overall security posture of businesses worldwide. As cyber threats continue to grow in complexity and frequency, Thoma Bravo's role in shaping the future of cybersecurity remains paramount. The firm's commitment to fostering technological advancements and supporting companies that address critical security challenges positions it as a central figure in the ongoing effort to secure the digital world.

Stay Safe, Stay Secure.

The CybersecurityHQ Team