Tenable to acquire Accurics

Tenable Holdings, Inc. has entered into a definitive agreement to acquire Accurics, Inc., a pioneer in delivering cloud-native security for both DevOps and security teams. Accurics enables the programmatic detection and mitigation of risks in Infrastructure as Code (IaC) before anything is ever provisioned. Following completion of this acquisition, Tenable's solutions will include holistic assessment and the automated remediation of policy violations and breach paths, before the infrastructure is provisioned and throughout its lifecycle.

The world is rapidly embracing IaC. IaC offers organizations a powerful competitive advantage by improving the efficiency of operations at scale. Leveraging the GitOps philosophy and seamlessly integrating with developer tools and workflows, Accurics enables security teams to assess and secure infrastructure both before it is deployed and at runtime.

Following the completion of the acquisition, Tenable and Accurics will introduce a complete lifecycle approach to modern risk management, leveraging IaC to fix problems for any cloud environment — before they can expose the business to risk. Accurics helps companies address risk across the entire lifecycle and supply chain, in development and runtime, and delivers fixes in code to ensure risks are remediated quickly with minimal burden on security experts. Accurics’ enterprise offering seamlessly scans IaC for misconfigurations and monitors provisioned cloud infrastructure for drift. Organizations will be able to secure what they build and innovate with confidence through Accurics’ augmented remediation capabilities, generating code to resolve policy violations and mitigate security risks. The acquisition extends Tenable’s broader cloud strategy, helping enterprises secure their full cloud stacks, both at build time and at runtime. Following the completion of the acquisition, Accurics’ solutions will integrate with Tenable.io® Container Security, an industry-leading solution integrating security into DevOps, Frictionless Assessment, which removes the need for agents or scanning to deliver continuous visibility and assessment of cloud assets, and Tenable.io Web Application Scanning, which offers simple, scalable and automated vulnerability scanning for web applications.

“Fully integrating security into the DevOps process and leveraging IaC processes to assess and prevent problems before deployment will secure cloud operations at speed and scale,” said Amit Yoran, chairman and CEO, Tenable. “From the introduction of Terrascan to their enterprise platform, Accurics is leading that revolution. Together, we will enable organizations to push their cloud and ‘as code’ journeys forward — with IaC, with containers and compute instances. This is all about accelerating innovation and simultaneously enabling security in ways previously not possible.”

“One of the biggest obstacles facing companies today is security teams are constantly challenged with understanding and effectively managing the risk and security for cloud environments at DevOps speeds. From the very beginning, Accurics has been singularly focused on securing infrastructure as code for modern enterprises,” said Piyush Sharrma, co-founder and chief executive officer at Accurics. “Cloud-native infrastructure requires security that is integrated into the DevOps pipeline and enforced throughout the lifecycle — shifting legacy processes left is simply inadequate. Joining forces with Tenable increases our ability to help organizations accelerate innovation by aligning development, operational, and security teams behind security and resiliency goals.”

Accurics also developed Terrascan, a powerful open-source tool for DevOps, which now has 200,000 downloads and has become a foundational part of cloud IaC practices. The founders who are currently with the company are Sharrma and Om Moolchandani. Sharrma is a seasoned technologist and entrepreneur behind multiple technology startups. He has led global teams across engineering, product and research at Symantec Corp to bring numerous enterprise security innovations to market. Moolchandani is the chief technology officer and chief information security officer. He has held numerous leadership positions at companies such as AutoGrid and General Electric, where he implemented security for the Industrial Cloud and Edge platform.

Under the terms of the agreement, Tenable will acquire Accurics for a total purchase price of approximately $160 million in cash, subject to certain customary purchase price adjustments. The acquisition is expected to close late in the third quarter or early in the fourth quarter of 2021, subject to the satisfaction of customary closing conditions.