SecureSky just bought a DSPM wedge. The price is blank. The stitch is the story.
On September 9 SecureSky, Inc. (Omaha) announced it has acquired Soveren, a London-based Data Security Posture Management company founded in 2021. The acquisition extends SecureSky’s patented platform with real-time, ML-based sensitive data discovery, classification, and protection across cloud-native and on-premises environments. Deal consideration: Undisclosed. Multiple: Undisclosed.
Product claims worth citing carefully from the PR Newswire release: Soveren’s architecture combines eBPF-powered network analysis with ML-driven classification; the company contrasts that with legacy DSPM’s regex false positives and static snapshots, and claims continuous visibility into sensitive data flows with 98% accuracy. It also claims to inspect and classify encrypted TLS traffic at scale with “zero impact on application speed.” At-rest DSPM plus real-time network analysis is the combined pitch — detect leakage, usage anomalies, and changes in third-party data flows across cloud and on-prem. Named customer logos in the release: Booking Holdings’ Agoda and OpenTable. Ratings cited by SecureSky: 4.9 on G2 and 5.0 on Gartner Peer Insights.
Capital history that is public in the same release: Soveren raised $10 million from investors and technology leaders including founders/CEOs of Airbnb, Slack, Datadog, Palo Alto Networks, MuleSoft, and Deel, Sir Richard Branson’s family, and European VCs firstminute capital, Northzone, and LocalGlobe. Founder color: Peter Fedchenkov (Founder and Co-CEO) frames the origin story as data observability pain while scaling a prior e-commerce business to $2 billion in revenue — anecdote, not a Soveren valuation. Andrew Zhulin and Dmitry Zhulin emphasize encrypted-traffic visibility where other solutions are “blind.”
SecureSky CEO Michael Hrabik positions the deal as combining patented AI-based Continuous Threat Exposure Management (CTEM) with Soveren’s ML DSPM for “unified visibility and protection” as adversaries operate with more speed and automation. SecureSky’s own footprint in the About block: 20+ years of cybersecurity expertise; Exposure Management + MDR; CSPM/SSPM, Managed XDR, Microsoft Sentinel deployment/management, and CTEM. That is a services-and-platform buyer stitching data posture into exposure management — adjacent to the broader DSPM consolidation tape (runtime data control tuck-ins elsewhere this week), not a hyperscaler megadeal.
Why it matters for buyers: exposure management without data context is half a map. DSPM without response hooks is a report. SecureSky is betting the attach is CTEM plus real-time data flows, sold through an existing MDR relationship rather than a net-new DSPM bake-off. That is a channel story as much as a product story — and still not a disclosed price.
POV: DSPM is being absorbed into whatever platform already owns the relationship — CNAPP, data security, MDR, or CTEM. A blank check size does not make this a category-defining print. Underwrite the architecture claim (eBPF + ML on data in motion, including TLS) and the $10M raise history. Question the “98% accuracy” and “only solution” language as company claims until third-party validation. Source: PR Newswire Sep 9. Price stays Undisclosed.
Underwrite sheet — sourced only: SecureSky acquires Soveren (Sep 9, 2026); price Undisclosed; Soveren founded 2021, London; eBPF + ML DSPM; 98% accuracy claim; encrypted TLS inspection claim; logos Agoda + OpenTable; G2 4.9 / Gartner Peer Insights 5.0; raised $10M (named operators + firstminute/Northzone/LocalGlobe); SecureSky CTEM + MDR platform stitch (PR Newswire). The stitch is underwritable. The blank multiple is not.