Arctic Wolf, the Eden Prairie, Minnesota, security operations company, said on 23 February 2026 that it had acquired Sevco Security, an Austin, Texas, startup that sells an exposure assessment platform. Sevco's cloud-native software, which keeps a running inventory of a company's assets and the weaknesses on them, will run on Arctic Wolf's Aurora Platform.
The companies did not disclose financial terms or a timeline for integrating the products.
Arctic Wolf said Sevco's technology would complement Arctic Wolf Managed Risk, its vulnerability and risk service, and would be offered to direct customers and to the managed service providers that resell Arctic Wolf. The announcement did not say whether Sevco's platform would continue to be sold as a separate product.
What Sevco built
Sevco describes its product as a system of record for assets and exposures. Instead of installing software agents on laptops and servers, it pulls inventory and vulnerability information through the native interfaces of systems a company already runs and reconciles it into one continuously updated list. Built In reported at the company's launch that it needed no agents, scanners or on-premises installation, which lets it see devices that endpoint tools miss.
The aim is to show security teams which assets exist, how they are exposed, and which weaknesses matter most, so that they can work from a ranked list rather than a static vulnerability report. Analyst firm Futurum described it as a cyber asset attack surface management platform.
In November 2025 Gartner named Sevco a Visionary in its Magic Quadrant for Exposure Assessment Platforms, a recognition Arctic Wolf highlighted in its announcement.
“Sevco was built to give security teams an authoritative, real-time view of every asset and exposure. Joining Arctic Wolf accelerates our mission and brings our platform's strengths to organizations that need unified visibility, smarter prioritization, and verifiable remediation as part of their security operations.”
Why Arctic Wolf is buying
Arctic Wolf's main business is managed detection and response: it watches customers' networks around the clock using telemetry from the security tools they already own. Exposure management moves that work earlier, toward finding and fixing weak points before an attacker uses them.
Dan Schiappa, Arctic Wolf's president of technology and services, said a proactive approach to security is not possible without managing exposure and risk, and that Sevco would give customers and managed service providers the context to act earlier and prioritise.
Fernando Montenegro, an analyst at Futurum, called the deal a tacit admission that telemetry from endpoint agents alone is not enough for exposure management, because agents miss unmanaged devices and shadow IT. He also warned that more asset data does not automatically improve results and can add to alert fatigue, and that mapping Sevco's data into Aurora would be technically difficult.
The deal follows Arctic Wolf's purchases of BlackBerry's Cylance business and UpSight Security, Futurum noted.
The founders and the funding
Sevco was founded in 2020 by J.J. Guy, its chief executive, and Greg Fitzgerald, Futurum reported. Before turning to building security products, Guy spent close to a decade breaking into networks, including work for the US Air Force and the US intelligence community, according to Built In.
The company came out of stealth in mid-2021 with a $15 million Series A led by SYN Ventures, with Accomplice, .406 Ventures, fama Ventures and Bill Wood Ventures taking part. That followed a seed round earlier in 2021 and brought its total at the time to $21.8 million, when it had 19 full-time employees. By the time of the sale, Sevco had about 50 staff and had raised $38.7 million across several rounds, mainly from SYN Ventures, according to Futurum.
A consolidating market for exposure management
Exposure management has drawn a wave of acquisitions. Futurum said Rapid7, ServiceNow and Sophos had all bought companies in the area over the previous 18 months, while large platform vendors such as CrowdStrike, Palo Alto Networks, SentinelOne and Tenable compete for the same budgets.
In its Magic Quadrant report, Gartner predicted that by 2027 organisations that feed exposure assessment data into IT and business workflows will see 30% less unplanned downtime from exploited vulnerabilities than those that rely on separate vulnerability management tools. Arctic Wolf cited that forecast in its announcement.
