Darktrace to Acquire Cado Security, Boosting Cloud Forensics Capabilities

Darktrace to acquire Cado Security to strengthen cloud forensic capabilities - SiliconANGLE

Darktrace to acquire Cado Security to strengthen cloud forensic capabilities Machine learning cybersecurity firm Darktrace PLC announced today that it plans to acquire cloud forensics and incident response platform startup Cado Security Ltd. for an undisclosed sum. Founded in 2020, Cado Security specializes in cloud-native digital forensics and incident response solutions, with a platform that offers "forensic-level details without forensic-level effort" when dealing with incident response in the cloud. The company's platform leverages the scale, speed and automation of the cloud to expedite forensics and incident response, with support for complex multicloud environments, systems and regions. The Cado Platform supports automated data collection from multi-cloud environments, including Amazon Web Services Inc., Microsoft Azure and Google Cloud Platform, as well as on-premises systems to allow for rapid analysis and response to cyber incidents. Cado users can analyze data in minutes with forensic-level detail to understand the full impact of cloud incidents, compared to what once took days with no agents required. The platform can investigate hundreds of data sources across cloud-provider logs, disk, memory and more to automatically surface key incident details, including root cause, compromised roles and assets, and a complete timeline of events, with support for single or multiple investigations at once. Coming into its acquisition, Cado Security had raised $31.5 million in venture capital funding over three rounds, including a round of $20 million in March 2023. Investors in Cado include Eurazeo S.A., Ten Eleven Ventures, Blossom Capital LLP, Cylonlab Ltd. and Enter Ventures S.r.l. Post acquisition, Darktrace intends to accelerate the growth of Cado's existing products through investment while also combining Cado's forensic investigation technology with Darktrace's existing ActiveAI Security Platform. The combination of the tech from the two companies will enhance data collection across multiple cloud environments to better defend customers' operations. "The addition of Cado's deep expertise in cloud-based data collection and forensics will enhance our ability to protect customers, ensuring they can operate securely and confidently across all areas of their business," Jill Popelka, chief executive officer of Darktrace, commented on the deal. "Together, Darktrace and Cado will help customers quickly and effectively prevent and deter cyber threats, maintaining resilience in a fast-evolving threat landscape." The deal is also notable as it's the first acquisition Darktrace has made since it was acquired on Oct. 1 by Thoma Bravo for $5.3 billion. The deal to acquire Darktrace had previously been announced in April. Nicole Carignan, vice president of strategic cyber AI at Darktrace, spoke with theCUBE, SiliconANGLE Media's livestreaming studio, in August to discuss how Darktrace is using AI to spot abnormalities through boosting incident detection, cyber resilience and threat vulnerability prioritization:

Darktrace announces proposed acquisition of Cado Security, a cloud investigation and response specialist

-- , a global leader in AI for cybersecurity today announced the proposed acquisition of Cado Security (Cado), a -based cyber investigation and response solution provider for the hybrid and multi-cloud world. Cado Security delivers broad support across multi-cloud, container, serverless, SaaS, and on-premises environments, eliminating blind spots in incident response. The acquisition is subject to receipt of regulatory approval and is expected to complete in February. A leader in cloud data capture and forensics, Cado examines the intricacies of nearly any system, capturing a snapshot of data stored on the device and then conducting forensic investigations to uncover signs of compromise or threats. intends to accelerate the growth of Cado's existing products through investment while also combining Cado's forensic investigation technology with existing ActiveAI Security Platform(TM), enhancing data collection across multiple cloud environments to better defend customers' operations. This richer data set can also enable significant augmentation to Cyber AI Analyst(TM) which investigates alerts, streamlines investigations and prioritizes incidents, reducing workload and alert fatigue for customers' cyber teams. Cado was founded by , CEO, and , CTO. Prior to founding Cado, James served as a Director at PwC building the Cyber Incident Response service. James's background also includes a career in intelligence, previously leading National Incident Response capability as the Assistant Director of Operations at the . Chris is well known for building the popular threat intelligence portal ThreatCrowd, which then merged into the AlienVault Open Threat Exchange, and was subsequently acquired by . We look forward to welcoming James, Chris and the Cado team to upon completion. The proposed acquisition represents continued investment in its cloud capabilities, following the successful launch of / CLOUD(TM) for AWS in and its expansion to Microsoft Azure in . Cloud security is becoming increasingly crucial in supporting customers' cyber resilience in an AI age as companies migrate their data to cloud platforms as well as relying on cloud-based SaaS services for essential business operations. threat research identifies cloud and SaaS platforms as a common entry point for cybercriminals to attempt access to customers' networks[1]. This, together with research from the 2024 Darktrace State of AI Cybersecurity report where security leaders identified cloud security as the top area where defensive AI could have the greatest impact[2], highlights the need for cloud-native AI-powered cybersecurity solutions. This announcement follows acquisition by in and highlights both and commitment to accelerating growth through the development of AI-augmented cyber solutions for its customers, including through the expansion of research and development capabilities to continue to drive product innovation for an evolving cyber threat landscape. Cado's R&D teams in and will work alongside established R&D centres in and to drive further innovation in Cloud Detection and Response capabilities. , Chief Executive Officer commented: "At , we have a clear and ambitious strategy: to develop best-in-class cybersecurity solutions for our customers that keep them safe through continuous innovation. The addition of Cado's deep expertise in cloud-based data collection and forensics will enhance our ability to protect customers, ensuring they can operate securely and confidently across all areas of their business. Together, and Cado will help customers quickly and effectively prevent and deter cyber threats, maintaining resilience in a fast-evolving threat landscape." Cado Security Co-Founder and CEO, , commented: " is an excellent fit for Cado, providing an opportunity for growth and innovation while allowing our team to advance their careers within a dynamic company deeply committed to R&D and to protecting its customers from growing cyber threats. Our technologies build on each other's strengths, and we are incredibly excited to work with the team to continue to elevate AI-driven cybersecurity capabilities for our combined global customer base." Cado Security is the provider of the first investigation and response automation platform focused on revolutionizing incident response for the hybrid world. Cado significantly reduces response times by automating the capture, processing, and analysis of data residing in cloud, container, serverless, SaaS, and on-premises environments. Cado empowers security teams to add critical context to everyday security investigations on any system. Anywhere. Anytime. With over 15 years' experience helping global organisations tackle sophisticated cyber espionage and criminal campaigns, James has a deep passion for cyber incident response, forensics and cyber crisis. Prior to founding Cado Security, Campbell served as a Director at PwC building the Cyber Incident Response service. Campbell's background also includes a career in intelligence, previously leading National Incident Response capability as the Assistant Director of Operations at the . James is an active thought leader having spoken at various conferences, including Black Hat, cloudsec, CRESTCon, and the Forensics Europe Expo. Chris is well known for building the popular threat intelligence portal ThreatCrowd, which then merged into the AlienVault Open Threat Exchange, later acquired by . Chris is an industry leading threat researcher, and has published a number of widely read articles and papers on targeted cyber attacks. His research on topics such as the North Korean government's crypto-currency theft schemes, and attacks against dissident websites, have been widely discussed in the media. About is a global leader in AI for cybersecurity that keeps organizations ahead of the changing threat landscape every day. Founded in 2013, provides the essential cybersecurity platform protecting organizations from unknown threats using its proprietary AI that learns from the unique patterns of life for each customer in real-time. The Darktrace ActiveAI Security Platform(TM) delivers a proactive approach to cyber resilience with pre-emptive visibility into security posture, real-time threat detection, and autonomous response - securing the business across cloud, email, identities, operational technology, endpoints, and network. Breakthrough innovations from our R&D teams in , and have resulted in over 200 patent applications filed. platform and services are supported by over 2,400 employees around the world who protect nearly 10,000 customers across all major industries globally. To learn more, visit http://www.darktrace.com.