9.1.7.4Vertical

Threat Intelligence Services

Companies providing curated threat intelligence on adversaries and campaigns.

Market snapshot

These figures describe Managed Detection & Response (MDR) (9.1.7), the segment that Threat Intelligence Services sits within. They are not figures for Threat Intelligence Services on its own.

FragmentationFragmentedEstimate

Not separately classified. The most acquirable segment in cybersecurity: recurring contracts, mid-market customers who will never staff a security team, and enough fragmentation to build a platform by acquisition. The constraint is analyst supply, which is why buyers pay for tooling that raises alerts handled per head.

Business model & economics

Revenue model

Recurring managed-security-service subscriptions

Key economics

Recurring revenue
High

recurring managed-service contracts

EBITDA margin
Service-and-software blend
Capex intensity
Low

Characteristics

  • 24/7 outsourced detection and response.
  • Addresses the chronic security-talent shortage.
  • Led by Arctic Wolf, Expel, Red Canary.

M&A deal context

Deal activityHigh

Who’s acquiring

  • MDR providers & security platforms
  • PE-backed MSSP consolidators
  • VC-backed vendors

What’s driving deals

  • Talent-shortage-driven outsourcing.
  • Cyber-insurance requirements.
  • Recurring-revenue MDR consolidation.

Find Threat Intelligence Services acquisition targets

Search Acquisera’s index for companies classified under Threat Intelligence Services (9.1.7.4) and build a targeted deal pipeline.

Search companies