Secureworks
Cybersecurity company known for managed security services, threat intelligence, incident response, and the Taegis security operations platform.
Last updated August 31, 2026
AI crawler reads
2requests
1companies- Anthropic2
- Profile
- 2
- Controversies
- 0
- JSON · MD
- 0
- First read
- Nov 4, 2026
- Latest read
- Nov 4, 2026
From this site's server log
Overview
Secureworks was a United States cybersecurity company that provided managed security services, threat intelligence, incident response, security consulting, penetration testing, and cloud-based security operations technology. Founded in 1998 by Michael Pearson and Joan Wilbanks, the company developed from a managed-security-services provider into a broader security operations business serving enterprises and mid-sized organizations. Its customer base included organizations in numerous industries and countries, ranging from large multinational corporations to smaller businesses. A significant early turning point came in 2006, when Secureworks merged with LURHQ Corporation, a managed security provider founded in 1996 in Myrtle Beach, South Carolina. The combination expanded Secureworks' enterprise capabilities and brought LURHQ's Sherlock portal into the enlarged business, helping consolidate customer monitoring and security-management functions on a more integrated platform. Secureworks subsequently acquired the managed security services business of VeriSign in 2009, increasing its international reach and expanding its customer base to approximately 2,600 organizations in more than 50 countries. Later that year it acquired dns Limited, adding a United Kingdom operations center and offices in London and Edinburgh. Dell announced an agreement to acquire Secureworks in January 2011, and Secureworks began operating as a Dell subsidiary in February of that year. Under Dell ownership, the company continued expanding its managed security and consulting operations, including the establishment of an operations center in Sydney in 2013 to support customers in Australia and New Zealand. Although Dell retained majority ownership, Secureworks returned to the public markets in 2016. Its initial public offering raised approximately $112 million at an offering price of $14 per share, and the company began trading on Nasdaq under the symbol SCWX. The business increasingly shifted from traditional managed security services toward cloud-delivered detection and response. In 2019, Secureworks introduced Red Cloak Threat Detection and Response, a software-as-a-service offering designed to analyze activity across endpoints, networks, and cloud environments and help security teams detect, investigate, and respond to threats. The company later developed the Taegis platform as its principal cloud security operations offering, combining telemetry, analytics, threat intelligence, detection, investigation, and response capabilities. Secureworks also maintained the Counter Threat Unit, whose researchers tracked criminal and state-linked threat activity and published profiles of intrusion sets and their techniques. Secureworks announced a move toward a more channel-oriented commercial model in 2020 through its Global Partner Program. Wendy K. Thomas became president and chief executive officer in September 2021, succeeding Michael R. Cote. In October 2024, Sophos agreed to acquire Secureworks for approximately $859 million. The transaction was completed in February 2025, ending Secureworks' status as an independent public company. Following the acquisition, Secureworks became part of Sophos, and its standalone brand presence was reduced as its web presence was integrated into Sophos' site. The Secureworks corporate entity is therefore treated here as defunct or no longer independently operating, although its technology, services, research capabilities, and customer relationships may continue within Sophos.
History
Secureworks was established in 1998 by Michael Pearson and Joan Wilbanks as a privately held cybersecurity business. Its initial focus was on managed security services, allowing customers to outsource portions of security monitoring, analysis, and response. Michael R. Cote became president and chief executive officer in 2002. During the middle of the decade, the company was recognized on Inc. growth-company lists and on Deloitte's Fast 500. In 2006, Secureworks merged with LURHQ Corporation, a managed security company founded in Myrtle Beach, South Carolina. LURHQ brought enterprise managed-security expertise and its Sherlock portal. Secureworks used the combination to bring the two organizations' customers onto a more unified security-management environment. The merger strengthened the company's ability to deliver monitoring and related services to larger organizations. Secureworks expanded internationally through acquisitions in 2009. It purchased the managed security services business of VeriSign, which increased its customer base to roughly 2,600 organizations across more than 50 countries and expanded its employee base beyond 500 people. The customer portfolio included major multinational companies as well as organizations in markets such as the United Kingdom, Saudi Arabia, Taiwan, Finland, Spain, Brazil, and Mexico. In December 2009, Secureworks acquired dns Limited, a managed security and consulting company. That deal added a United Kingdom operations center and offices in London and Edinburgh. Dell announced its acquisition of Secureworks on January 4, 2011. Secureworks became a Dell subsidiary on February 7, 2011, operating within Dell's services activities. The company continued offering managed security, consulting, penetration testing, forensics, and monitoring services under Dell ownership. In 2013, Dell Secureworks expanded its presence in Australia and New Zealand and opened an operations center in Sydney. Local demand included penetration testing, forensic investigations, and continuous monitoring for signs of attack. Secureworks later separated operationally from Dell's ownership through a public offering. The company filed for an IPO in December 2015 and completed the offering in April 2016. It raised approximately $112 million at $14 per share and traded on Nasdaq as SCWX. In 2017, Secureworks updated its visual identity and changed the capitalization of the brand name's second word. The company's strategic direction increasingly moved from labor-intensive managed security services toward software-enabled security operations. In April 2019, Secureworks introduced Red Cloak Threat Detection and Response, a cloud-based service designed to collect and analyze telemetry from endpoints, networks, and cloud infrastructure while supporting investigation and response. During a MITRE ATT&CK endpoint protection evaluation, Secureworks reported full detection performance for several tactic categories and visibility across much of the evaluated framework. These results were company-reported and should not be read as a universal ranking of the product. Secureworks also maintained the Counter Threat Unit, a research group responsible for analyzing vulnerabilities, adversary behavior, malware, and intrusion sets affecting organizations. Beginning in 2020, the group published threat-group profiles covering objectives, aliases, and observed malware or techniques, including both criminal and government-linked activity. In May 2020, Secureworks announced its Global Partner Program and signaled a shift toward a channel-led go-to-market model. Wendy K. Thomas became president and chief executive officer in September 2021 after Cote's retirement. In October 2024, Sophos agreed to acquire Secureworks for approximately $859 million. The transaction closed in February 2025. Secureworks consequently ceased to operate as an independent public company and became part of Sophos. Its standalone website and brand presence were subsequently integrated more closely with Sophos.
- 2025
Acquisition by Sophos is completed
[1]Sophos completes its acquisition of Secureworks, ending Secureworks' independent public-company status.
- 2021
Wendy K. Thomas becomes CEO
[1]Wendy K. Thomas succeeds Michael R. Cote as president and chief executive officer.
- 2020
Global Partner Program announced
[1]Secureworks formalizes a channel-oriented partner strategy intended to broaden indirect distribution.
- 2019
Red Cloak Threat Detection and Response launches
[1]Secureworks launches a cloud-based detection and response service that extends monitoring and investigation across endpoints, networks, and cloud environments.
- 2016
Initial public offering
[1]Secureworks returns to the public markets through a Nasdaq IPO, raising approximately $112 million at $14 per share.
- 2013
Expansion into Australia and New Zealand
[1]Dell Secureworks opens an operations center in Sydney to support customers in Australia and New Zealand.
- 2011
Secureworks becomes a Dell subsidiary
[1]Dell completes its acquisition of Secureworks and places the company within Dell's services organization.
- 2009
VeriSign managed security services acquisition
[1]Secureworks acquires VeriSign's managed security services business, materially increasing its international customer and employee base.
- 2009
dns Limited acquisition
[1]The acquisition adds United Kingdom operational capabilities, including a security operations center and offices in London and Edinburgh.
- 2006
Merger with LURHQ Corporation
[1]Secureworks combines with LURHQ Corporation and incorporates the Sherlock security-management portal into the combined operation.
Products and positioning
Enterprise-focused cybersecurity provider combining managed detection and response, threat intelligence, incident response, and cloud security operations technology.
Cloud security operations platform
Taegis
Taegis is Secureworks' cloud-based security operations platform. It is designed to combine security telemetry, threat intelligence, analytics, detection, investigation, and response workflows across endpoint, network, identity, and cloud environments. The platform represents the company's shift from predominantly managed services toward a software-enabled model that can support internal security teams, managed service providers, and co-managed security operations.
Threat detection and response software · 2019
Red Cloak Threat Detection and Response
Red Cloak Threat Detection and Response was introduced in 2019 as a software-as-a-service product for analyzing activity across endpoints, networks, and cloud environments. It was intended to help security analysts identify malicious behavior, investigate incidents, understand attacker movement, and coordinate response. Red Cloak formed an important predecessor and technology element in Secureworks' broader Taegis platform strategy.
Managed cybersecurity services
Managed Security Services
Secureworks' managed security services were built around continuous monitoring, alert analysis, threat detection, and operational support for organizations that lacked the resources or desire to operate every security function internally. The business expanded substantially through the LURHQ and VeriSign transactions and remained a foundation of the company's enterprise cybersecurity model even as cloud software became more prominent.
Threat intelligence and research
Counter Threat Unit
The Counter Threat Unit was Secureworks' threat research organization. It monitored adversary activity, analyzed vulnerabilities and malware, and produced intelligence for customers and the wider security community. From 2020, the team published threat-group profiles describing observed intrusion sets, their objectives, alternative names, and associated tools or techniques. Coverage included both financially motivated criminal groups and government-linked actors.
Marketing campaigns
- 2020Secureworks Global Partner Program
Global
Secureworks introduced a global partner program to make channel relationships a more central part of its route to market. The initiative supported resellers, service providers, and other partners in taking Secureworks offerings to customers.
Outcome. The program marked a stated strategic move toward a channel-focused commercial model.
Brand decisions
2024
Agree to acquisition by SophosM&ABackground
Secureworks and Sophos pursued a combination intended to bring together their cybersecurity products, services, and customer bases.
Action taken
Sophos agreed to acquire Secureworks for approximately $859 million.
Aftermath
The transaction closed in February 2025 and ended Secureworks' independent public-company status.
Announced acquisition value. $859 million (October 2024 announcement)
2020
Shift toward a channel-focused go-to-market modelStrategyBackground
Secureworks identified the need to supplement its historically direct sales approach with broader partner distribution.
Action taken
The company launched the Global Partner Program and emphasized channel relationships.
Aftermath
The move positioned resellers and service providers as a more important route to market for Secureworks offerings.
2019
Launch Red Cloak Threat Detection and ResponseProduct launchBackground
Secureworks was moving beyond traditional managed security services toward cloud-delivered detection and response technology.
Action taken
The company introduced a SaaS product for threat analysis, detection, investigation, and response across endpoints, networks, and cloud environments.
Aftermath
Red Cloak became an important part of the company's transition toward a platform-oriented security operations model.
2016
Return to public marketsOtherBackground
After several years as a Dell subsidiary, Secureworks pursued a new public listing while Dell retained majority ownership.
Action taken
Secureworks completed a Nasdaq IPO at $14 per share and raised approximately $112 million.
Aftermath
The company again became publicly traded under the SCWX ticker.
IPO proceeds. $112 million (April 2016)
2011
Sell Secureworks to DellM&ABackground
Dell sought to expand its services portfolio with cybersecurity capabilities.
Action taken
Dell acquired Secureworks and operated it as a subsidiary within Dell Services.
Aftermath
Secureworks gained the resources and distribution potential of Dell while continuing to operate as a distinct cybersecurity business.
2009
Acquire VeriSign managed security services businessM&ABackground
Secureworks pursued scale and international expansion in managed security services.
Action taken
It acquired the managed security services business of VeriSign.
Aftermath
The transaction increased Secureworks' customer base, employee count, and presence across more than 50 countries.
2006
Merge with LURHQ CorporationM&ABackground
Secureworks sought to expand its managed security capabilities and enterprise customer base through the combination with LURHQ, another managed security provider.
Action taken
The companies merged and continued under the Secureworks name, with LURHQ's Sherlock portal helping unify customer management and monitoring.
Aftermath
The merger broadened Secureworks' service platform and strengthened its enterprise-oriented operations.
Recent events
- Unconfirmed
Arrow Electronics signs pan-European distribution agreement with Secureworks[3]
Arrow Electronics signed a pan-European distribution agreement with Secureworks to offer Secureworks software and services through the European channel.
Reported
Secureworks unveils Taegis XDR[4]
Secureworks unveiled its Taegis security analytics platform, including Taegis XDR, a cloud-native solution for detecting and responding to attacks across cloud, endpoint and network environments.
Reported
Secureworks completes acquisition of Delve Laboratories[5]
Secureworks announced that it had completed its acquisition of Delve Laboratories, whose SaaS solution provides automated vulnerability detection and prioritization.
Reported
Globe Business partners with Secureworks on cybersecurity[6]
Globe Business partnered with Secureworks to offer customers software and solutions intended to help strengthen their security posture against cyber threats.
Sources6 sources
Cite this profile: Cite the canonical profile. /brand-wiki/secureworks · Editorial policy · How profiles are compiled