Secureworks

Secureworks was a United States cybersecurity company that provided managed security services, threat intelligence, incident response, security consulting, penetration testing, and cloud-based security operations technology. Founded in 1998 by Michael Pearson and Joan Wilbanks, the company developed from a managed-security-services provider into a broader security operations business serving enterprises and mid-sized organizations. Its customer base included organizations in numerous industries and countries, ranging from large multinational corporations to smaller businesses. A significant early turning point came in 2006, when Secureworks merged with LURHQ Corporation, a managed security provider founded in 1996 in Myrtle Beach, South Carolina. The combination expanded Secureworks' enterprise capabilities and brought LURHQ's Sherlock portal into the enlarged business, helping consolidate customer monitoring and security-management functions on a more integrated platform. Secureworks subsequently acquired the managed security services business of VeriSign in 2009, increasing its international reach and expanding its customer base to approximately 2,600 organizations in more than 50 countries. Later that year it acquired dns Limited, adding a United Kingdom operations center and offices in London and Edinburgh. Dell announced an agreement to acquire Secureworks in January 2011, and Secureworks began operating as a Dell subsidiary in February of that year. Under Dell ownership, the company continued expanding its managed security and consulting operations, including the establishment of an operations center in Sydney in 2013 to support customers in Australia and New Zealand. Although Dell retained majority ownership, Secureworks returned to the public markets in 2016. Its initial public offering raised approximately $112 million at an offering price of $14 per share, and the company began trading on Nasdaq under the symbol SCWX. The business increasingly shifted from traditional managed security services toward cloud-delivered detection and response. In 2019, Secureworks introduced Red Cloak Threat Detection and Response, a software-as-a-service offering designed to analyze activity across endpoints, networks, and cloud environments and help security teams detect, investigate, and respond to threats. The company later developed the Taegis platform as its principal cloud security operations offering, combining telemetry, analytics, threat intelligence, detection, investigation, and response capabilities. Secureworks also maintained the Counter Threat Unit, whose researchers tracked criminal and state-linked threat activity and published profiles of intrusion sets and their techniques. Secureworks announced a move toward a more channel-oriented commercial model in 2020 through its Global Partner Program. Wendy K. Thomas became president and chief executive officer in September 2021, succeeding Michael R. Cote. In October 2024, Sophos agreed to acquire Secureworks for approximately $859 million. The transaction was completed in February 2025, ending Secureworks' status as an independent public company. Following the acquisition, Secureworks became part of Sophos, and its standalone brand presence was reduced as its web presence was integrated into Sophos' site. The Secureworks corporate entity is therefore treated here as defunct or no longer independently operating, although its technology, services, research capabilities, and customer relationships may continue within Sophos.

Secureworks was established in 1998 by Michael Pearson and Joan Wilbanks as a privately held cybersecurity business. Its initial focus was on managed security services, allowing customers to outsource portions of security monitoring, analysis, and response. Michael R. Cote became president and chief executive officer in 2002. During the middle of the decade, the company was recognized on Inc. growth-company lists and on Deloitte's Fast 500. In 2006, Secureworks merged with LURHQ Corporation, a managed security company founded in Myrtle Beach, South Carolina. LURHQ brought enterprise managed-security expertise and its Sherlock portal. Secureworks used the combination to bring the two organizations' customers onto a more unified security-management environment. The merger strengthened the company's ability to deliver monitoring and related services to larger organizations. Secureworks expanded internationally through acquisitions in 2009. It purchased the managed security services business of VeriSign, which increased its customer base to roughly 2,600 organizations across more than 50 countries and expanded its employee base beyond 500 people. The customer portfolio included major multinational companies as well as organizations in markets such as the United Kingdom, Saudi Arabia, Taiwan, Finland, Spain, Brazil, and Mexico. In December 2009, Secureworks acquired dns Limited, a managed security and consulting company. That deal added a United Kingdom operations center and offices in London and Edinburgh. Dell announced its acquisition of Secureworks on January 4, 2011. Secureworks became a Dell subsidiary on February 7, 2011, operating within Dell's services activities. The company continued offering managed security, consulting, penetration testing, forensics, and monitoring services under Dell ownership. In 2013, Dell Secureworks expanded its presence in Australia and New Zealand and opened an operations center in Sydney. Local demand included penetration testing, forensic investigations, and continuous monitoring for signs of attack. Secureworks later separated operationally from Dell's ownership through a public offering. The company filed for an IPO in December 2015 and completed the offering in April 2016. It raised approximately $112 million at $14 per share and traded on Nasdaq as SCWX. In 2017, Secureworks updated its visual identity and changed the capitalization of the brand name's second word. The company's strategic direction increasingly moved from labor-intensive managed security services toward software-enabled security operations. In April 2019, Secureworks introduced Red Cloak Threat Detection and Response, a cloud-based service designed to collect and analyze telemetry from endpoints, networks, and cloud infrastructure while supporting investigation and response. During a MITRE ATT&CK endpoint protection evaluation, Secureworks reported full detection performance for several tactic categories and visibility across much of the evaluated framework. These results were company-reported and should not be read as a universal ranking of the product. Secureworks also maintained the Counter Threat Unit, a research group responsible for analyzing vulnerabilities, adversary behavior, malware, and intrusion sets affecting organizations. Beginning in 2020, the group published threat-group profiles covering objectives, aliases, and observed malware or techniques, including both criminal and government-linked activity. In May 2020, Secureworks announced its Global Partner Program and signaled a shift toward a channel-led go-to-market model. Wendy K. Thomas became president and chief executive officer in September 2021 after Cote's retirement. In October 2024, Sophos agreed to acquire Secureworks for approximately $859 million. The transaction closed in February 2025. Secureworks consequently ceased to operate as an independent public company and became part of Sophos. Its standalone website and brand presence were subsequently integrated more closely with Sophos.

1. 2025Acquisition by Sophos is completed

   Sophos completes its acquisition of Secureworks, ending Secureworks' independent public-company status.

   Source
2. 2021Wendy K. Thomas becomes CEO

   Wendy K. Thomas succeeds Michael R. Cote as president and chief executive officer.

   Source
3. 2020Global Partner Program announced

   Secureworks formalizes a channel-oriented partner strategy intended to broaden indirect distribution.

   Source
4. 2019Red Cloak Threat Detection and Response launches

   Secureworks launches a cloud-based detection and response service that extends monitoring and investigation across endpoints, networks, and cloud environments.

   Source
5. 2016Initial public offering

   Secureworks returns to the public markets through a Nasdaq IPO, raising approximately $112 million at $14 per share.

   Source
6. 2013Expansion into Australia and New Zealand

   Dell Secureworks opens an operations center in Sydney to support customers in Australia and New Zealand.

   Source
7. 2011Secureworks becomes a Dell subsidiary

   Dell completes its acquisition of Secureworks and places the company within Dell's services organization.

   Source
8. 2009VeriSign managed security services acquisition

   Secureworks acquires VeriSign's managed security services business, materially increasing its international customer and employee base.

   Source
9. 2009dns Limited acquisition

   The acquisition adds United Kingdom operational capabilities, including a security operations center and offices in London and Edinburgh.

   Source
10. 2006Merger with LURHQ Corporation

    Secureworks combines with LURHQ Corporation and incorporates the Sherlock security-management portal into the combined operation.

    Source
11. 2002Michael R. Cote becomes chief executive

    Michael R. Cote becomes president and chief executive officer, beginning a long leadership period for the company.

    Source
12. 1998Secureworks is founded

    Michael Pearson and Joan Wilbanks establish Secureworks as a privately held cybersecurity company.

    Source

Enterprise-focused cybersecurity provider combining managed detection and response, threat intelligence, incident response, and cloud security operations technology.

• TaegisCloud security operations platform

  Taegis is Secureworks' cloud-based security operations platform. It is designed to combine security telemetry, threat intelligence, analytics, detection, investigation, and response workflows across endpoint, network, identity, and cloud environments. The platform represents the company's shift from predominantly managed services toward a software-enabled model that can support internal security teams, managed service providers, and co-managed security operations.

• Red Cloak Threat Detection and ResponseThreat detection and response software2019

  Red Cloak Threat Detection and Response was introduced in 2019 as a software-as-a-service product for analyzing activity across endpoints, networks, and cloud environments. It was intended to help security analysts identify malicious behavior, investigate incidents, understand attacker movement, and coordinate response. Red Cloak formed an important predecessor and technology element in Secureworks' broader Taegis platform strategy.

• Managed Security ServicesManaged cybersecurity services

  Secureworks' managed security services were built around continuous monitoring, alert analysis, threat detection, and operational support for organizations that lacked the resources or desire to operate every security function internally. The business expanded substantially through the LURHQ and VeriSign transactions and remained a foundation of the company's enterprise cybersecurity model even as cloud software became more prominent.

• Counter Threat UnitThreat intelligence and research

  The Counter Threat Unit was Secureworks' threat research organization. It monitored adversary activity, analyzed vulnerabilities and malware, and produced intelligence for customers and the wider security community. From 2020, the team published threat-group profiles describing observed intrusion sets, their objectives, alternative names, and associated tools or techniques. Coverage included both financially motivated criminal groups and government-linked actors.

• 2020Secureworks Global Partner Program

  Global

  Secureworks introduced a global partner program to make channel relationships a more central part of its route to market. The initiative supported resellers, service providers, and other partners in taking Secureworks offerings to customers.

  Outcome. The program marked a stated strategic move toward a channel-focused commercial model.

  Source

• 2024Agree to acquisition by SophosM&A

  Secureworks and Sophos pursued a combination intended to bring together their cybersecurity products, services, and customer bases.

  What changed. Sophos agreed to acquire Secureworks for approximately $859 million.

  Aftermath. The transaction closed in February 2025 and ended Secureworks' independent public-company status.

  Announced acquisition value. $859 million (October 2024 announcement)

  Source
• 2020Shift toward a channel-focused go-to-market modelStrategy

  Secureworks identified the need to supplement its historically direct sales approach with broader partner distribution.

  What changed. The company launched the Global Partner Program and emphasized channel relationships.

  Aftermath. The move positioned resellers and service providers as a more important route to market for Secureworks offerings.

  Source
• 2019Launch Red Cloak Threat Detection and ResponseProduct launch

  Secureworks was moving beyond traditional managed security services toward cloud-delivered detection and response technology.

  What changed. The company introduced a SaaS product for threat analysis, detection, investigation, and response across endpoints, networks, and cloud environments.

  Aftermath. Red Cloak became an important part of the company's transition toward a platform-oriented security operations model.

  Source
• 2016Return to public marketsOther

  After several years as a Dell subsidiary, Secureworks pursued a new public listing while Dell retained majority ownership.

  What changed. Secureworks completed a Nasdaq IPO at $14 per share and raised approximately $112 million.

  Aftermath. The company again became publicly traded under the SCWX ticker.

  IPO proceeds. $112 million (April 2016)

  Source
• 2011Sell Secureworks to DellM&A

  Dell sought to expand its services portfolio with cybersecurity capabilities.

  What changed. Dell acquired Secureworks and operated it as a subsidiary within Dell Services.

  Aftermath. Secureworks gained the resources and distribution potential of Dell while continuing to operate as a distinct cybersecurity business.

  Source
• 2009Acquire VeriSign managed security services businessM&A

  Secureworks pursued scale and international expansion in managed security services.

  What changed. It acquired the managed security services business of VeriSign.

  Aftermath. The transaction increased Secureworks' customer base, employee count, and presence across more than 50 countries.

  Source
• 2006Merge with LURHQ CorporationM&A

  Secureworks sought to expand its managed security capabilities and enterprise customer base through the combination with LURHQ, another managed security provider.

  What changed. The companies merged and continued under the Secureworks name, with LURHQ's Sherlock portal helping unify customer management and monitoring.

  Aftermath. The merger broadened Secureworks' service platform and strengthened its enterprise-oriented operations.

  Source

• 2025Sophos completes acquisition of Secureworks

  The acquisition of Secureworks by Sophos was completed, ending Secureworks' independent public-company status and bringing its business into the Sophos group.

  M&A
  Source
• 2024Sophos agrees to acquire Secureworks

  Sophos agreed to acquire Secureworks for approximately $859 million, subject to transaction conditions and approvals.

  M&A
  Source
• 2021Wendy K. Thomas becomes chief executive

  Wendy K. Thomas succeeded Michael R. Cote as president and chief executive officer following Cote's retirement.

  Leadership change
  Source
• 2021Wendy K. Thomas becomes chief executive officer

  Wendy K. Thomas succeeded Michael R. Cote as president and chief executive officer after Cote's retirement.

  Leadership change
  Source
• 2020Secureworks launches Global Partner Program

  The company announced a channel-focused partner program as part of a shift away from a primarily direct sales model.

  Other
  Source
• 2020Secureworks establishes Global Partner Program

  The company announced a global partner initiative intended to shift its go-to-market model toward channel sales and deeper relationships with technology and services partners.

  Other
  Source
• 2019Secureworks introduces Red Cloak Threat Detection and Response

  Secureworks launched Red Cloak Threat Detection and Response, a cloud-based software service intended to detect, investigate, and respond to malicious activity across endpoint, network, and cloud environments.

  Product launch
  Source
• 2016Secureworks returns to the public market

  Secureworks completed an initial public offering on Nasdaq under the symbol SCWX. The offering raised approximately $112 million and marked the company's return to public ownership after becoming part of Dell.

  Other
  Source
• 2016Secureworks completes initial public offering

  Secureworks announced its public offering at $14 per share and raised approximately $112 million. The offering returned the Dell-owned cybersecurity business to the public market.

  Other
  Source
• 2011Dell agrees to acquire Secureworks

  Dell announced that it would acquire Secureworks and operate the cybersecurity company as part of Dell Services. Secureworks formally began operating as a Dell subsidiary in February 2011.

  M&A
  Source
• 2011Dell announces acquisition of Secureworks

  Dell announced that it would acquire Secureworks and incorporate the cybersecurity company into Dell Services. Secureworks began operating as a Dell subsidiary in February 2011.

  M&A
  Source

1. Secureworks
2. Secureworks official website