Microsoft-first MXDR just got a platform deal. Price stays blank. The thesis does not.
On September 16 Quorum Cyber announced it has signed a definitive agreement to acquire Ontinue, a five-time Microsoft Gold Partner MXDR provider built around an Agentic Security Operations Center. Same day, EQT (EQT Mid Market Europe) confirmed it has signed a definitive agreement to sell Ontinue to Quorum. Financial terms: Undisclosed in both releases.
What is combining, per Quorum’s PR: agentic AI-powered MXDR, cyber resilience, and human expertise aimed at defending at machine speed while people keep strategy, guardrails, and critical decisions. Quorum CEO Kevin Hanes frames the future as experienced defenders directing AI-powered systems that work continuously — not security teams managing more tools. Ontinue CEO Moritz Mann’s line: in the Autonomous Threat Era, AI must be intrinsic to SecOps, not a bolt-on; Ontinue’s Agentic SOC lets AI agents investigate, decide, and act within customer-defined guardrails.
Microsoft gravity is the underwrite, not the slogan. Quorum is a Microsoft Solutions Partner for Security holding all Microsoft Security specializations, a MISA member, and the 2025 Microsoft Security MSSP of the Year. Ontinue is a first-wave MISA member, five-time Microsoft Gold Partner, and past Microsoft Security Excellence Awards winner. The combined portfolio intent, per Quorum: deepen support for Azure, Defender XDR, Sentinel, Entra, Purview, Microsoft 365 Copilot, Security Copilot, Microsoft Scout, Agent 365, and emerging agentic capabilities — including Microsoft’s Project Perception framing in the same release. Geography after close: stronger reach across North America, the UK, and DACH.
EQT’s sell-side note adds the operating facts Quorum’s release leaves quieter. Ontinue serves more than 250 customers (enterprises, NGOs, institutions) across Europe and the US on a 24/7 model. Proprietary ION platform is Microsoft-ecosystem-centric with agentic AI automation. Ontinue was carved out of Open Systems’ MDR business into a standalone company in 2023. EQT invested in Open Systems in 2017; Open Systems later sold to Swiss Post in 2024. Under EQT’s ownership Ontinue has approximately doubled in scale and strengthened its financial profile since 2022; EQT cites consolidating three technology platforms into one AI-native platform and three add-on acquisitions in data science, AI, and cybersecurity services. Those scale and add-on claims are EQT’s.
Ownership after close matters for channel and PE watchers. Eterna Growth Partners, current majority investor of Quorum Cyber, will be the majority investor of the combined company (Quorum PR). Advisors: Quorum — Mintz, Macfarlanes, Schellenberg Wittmer; Ontinue — Raymond James and Bär & Karrer. Closing expected after customary conditions and any required approvals; until then the companies operate independently.
POV: This is not “another MSSP tuck-in.” It is a bet that Microsoft-first Agentic SOC / MXDR consolidates around partners who can operationalize Defender, Sentinel, and Copilot-class tooling at machine speed with human accountability. Buyers should ask whether combining Quorum’s resilience and services footprint with Ontinue’s AI-native ION / Agentic SOC creates a durable Microsoft-centric platform — or a branding wrap on two MSSPs that still look like point MXDR after the press cycle. Price Undisclosed. Customer count >250 (EQT). Scale “approximately doubled” since 2022 (EQT). Majority: Eterna. Sources: Quorum / PR Newswire Sep 16, EQT Sep 16, and EQT / PR Newswire Sep 16.
Underwrite sheet — sourced only: definitive agreement Quorum to acquire Ontinue (Quorum PR Sep 16); EQT Mid Market Europe selling Ontinue to Quorum (EQT Sep 16); financial terms Undisclosed; Eterna Growth Partners majority of combined company; Ontinue >250 customers Europe/US 24/7; ION platform; carve-out from Open Systems 2023; ~doubled scale since 2022 under EQT; three platform consolidation + three add-ons (EQT); Quorum 2025 Microsoft Security MSSP of the Year; Ontinue five-time Microsoft Gold / MISA; NA + UK + DACH reach intent; close after customary conditions; independent until close. Microsoft-first Agentic SOC is the thesis. The blank price stays blank.
