Summary
- SecureSky has acquired London-based data-security company Soveren; financial terms were not disclosed.
- Soveren analyses sensitive data at rest and in network traffic using eBPF and machine-learning techniques.
- The deal reflects convergence between data-security posture management, exposure management, and managed detection platforms.
SecureSky has acquired London-based data-security company Soveren, combining data discovery and classification technology with a broader platform spanning cloud exposure management and managed detection and response.
The companies did not disclose the financial terms of the transaction. SecureSky said Soveren’s technology will be integrated into its Active Protection Platform, extending the system into data security posture management, or DSPM.
Soveren analyses sensitive information both at rest and as it moves through application environments. Its technology uses eBPF-based network analysis alongside machine-learning classification to identify data and map how it moves between services.
SecureSky claims the technology can classify sensitive data with 98% accuracy and inspect encrypted TLS traffic at scale without affecting application performance. Those performance statements have not been independently verified and should be treated as vendor claims.
The strategic logic of the acquisition reflects a wider convergence in enterprise security. Exposure-management platforms traditionally focus on assets, vulnerabilities, configurations, identities, and other conditions that create attack paths. DSPM products focus on the location and handling of sensitive information. Managed detection platforms concentrate on malicious activity after controls have failed or been bypassed.
Bringing those data sets together can provide more context around which exposures deserve priority. An internet-facing weakness on a low-value system does not necessarily carry the same consequence as one connected to services processing regulated or commercially sensitive information.
That prioritisation problem has become harder as applications have moved towards distributed cloud architectures. Sensitive information may pass through databases, APIs, containers, SaaS platforms, analytics pipelines, and temporary services rather than remaining inside a small number of obvious data stores.
Soveren was built around that application-layer problem. Its product combines scanning of stored data with traffic analysis intended to show which services are handling information and where it moves.
SecureSky, meanwhile, provides cloud security posture management, exposure-management, and managed detection services. Integrating Soveren gives it another source of context for determining whether a technical weakness affects data of genuine business value.
The acquisition also reflects continued consolidation in a cybersecurity market where customers have accumulated large numbers of specialised tools. Vendors increasingly argue that security data should be combined within broader platforms to reduce operational fragmentation.
That argument is commercially attractive but technically difficult. Data-security platforms and detection systems operate at different layers, and integrating them requires more than putting alerts into a common interface. Asset identities, application dependencies, data classifications, and event telemetry have to refer to the same environment consistently if the combined context is to be reliable.
Soveren will also bring SecureSky further into privacy and compliance use cases because understanding where sensitive information resides is central to regulatory requirements governing personal and regulated data.
For organisations running complex cloud applications, the practical value of the acquisition will depend on whether the combined platform can connect data exposure to exploitable conditions without generating another large stream of findings to triage.
The transaction is therefore less notable for its undisclosed size than for the category boundaries it crosses. DSPM, exposure management, and managed detection are increasingly competing to become the context layer through which organisations decide what to protect first. SecureSky’s acquisition places sensitive-data location directly inside that calculation.
