M&A
Barracuda Networks, backed by KKR, has acquired Evo Security, an Austin, Texas-based provider of identity and access management (IAM) solutions. Evo Security had raised around $15m from investors including TechOperators, MetroSITE Group, Sorenson Capital, and Inner Loop Capital. The deal represents a further build-out of Barracuda's security product stack through a PE-backed add-on acquisition, a structure common in the managed security service provider space where platform companies absorb point-solution specialists to broaden their offering. IAM, which controls who can access which systems and data, has become a priority area for enterprise buyers as credential-based attacks grow in frequency. Separately, Blackstone is in talks to acquire Australian medical-technology company Device Technologies from Navis Capital, and H.I.G. Capital has agreed to acquire a majority stake in Terras Group, a German infrastructure engineering and construction services provider. Assent, a Canadian supply chain sustainability management firm backed by Blackstone and Vista Equity Partners, has acquired German auto compliance technology provider iPoint. No deal values were disclosed for these transactions, and no legal advisers were named across any of these deals.
Why this matters
PE-backed platform add-on acquisitions in cybersecurity require corporate M&A lawyers to navigate both the primary deal and any required regulatory notifications, particularly where targets handle sensitive data or operate in regulated sectors. The Barracuda-Evo deal activates M&A, technology transactions, and potentially data protection work given the nature of IAM software. The spread of deals across US, European, and Asia-Pacific targets this week underscores that mid-market sponsor-to-sponsor and add-on activity remains active even as headline megadeals slow, keeping associates busy across multiple jurisdictions. No advisers are named in the sources, so firm positioning cannot be assessed.
On the Ground
On an add-on acquisition like this, a trainee would assist with drafting conditions precedent (CP) checklists tracking all regulatory notifications and consents required before closing, verify the target's corporate structure for the disclosure letter, and prepare Companies House filing documentation once the transaction completes. Completion bible assembly would draw together the signed transaction documents, regulatory filings, and board minutes.
Interview prep
Question you might get
“What additional due diligence would you run on a target like Evo Security that holds sensitive customer access credentials, and which regulatory regimes might affect the deal?”
Sign up free to see the full answer
A model answer you can lift into an interview — how to frame this story for a partner.
Sign up freeMy notes
saved