Secureworks

This article may have been created or edited in return for undisclosed payments, a violation of Wikipedia's terms of use. It may require cleanup to comply with Wikipedia's content policies, particularly neutral point of view. (January 2021)

Secureworks Inc.

Company type	Public subsidiary
Traded as	Nasdaq: SCWX (Class A) Russell 2000 component
Industry	Cybersecurity
Headquarters	Atlanta, Georgia , U.S.
Area served	North America Europe Middle East Asia Africa South America
Key people	Wendy K. Thomas (president & CEO) Michael Dell (chairman)
Products	Secureworks Taegis XDR, Secureworks Taegis ManagedXDR
Revenue	US$366 million (2024)
Operating income	US$−112 million (2024)
Net income	US$−86 million (2024)
Total assets	US$725 million (2024)
Total equity	US$501 million (2024)
Number of employees	1,516 (2024)
Parent	Dell Technologies (82.6%)
Website	secureworks.com
Footnotes / references Financials as of February 2, 2024[update][1]

Secureworks Inc. is an American cybersecurity company. The company has approximately 4,000 customers in more than 50 countries,^[2] ranging from Fortune 100 companies to mid-sized businesses in a variety of industries.^[3]

It became part of Dell Technologies in February 2011 and was later the subject of an IPO to again become a publicly traded company in April 2016.^[4] It is still majority-owned by Dell.^[1]: 15

Secureworks was founded as a privately held company in 1998^[5] by Michael Pearson and Joan Wilbanks. In 2002, Michael R. Cote became president and CEO. In 2005, and again in 2006, the company was named to the Inc. 500 and Inc. 5000 lists^[6] 2006^[7] and Deloitte’s Fast 500.^[8]

In 2006, Secureworks merged with LURHQ Corporation and the new entity continued under the Secureworks corporate name.^[9] LURHQ was founded in 1996 in Myrtle Beach, SC and provided managed security services to large enterprises.^[10] With the merger, Secureworks was able to leverage Sherlock, LURHQ's portal, to unify its combined customer base onto a single integrated security management platform.^[10]

In 2009, Secureworks acquired the Managed Security Services (MSS) business from VeriSign, Inc. and grew to more than 500 employees worldwide.^[11] The acquisition expanded its clients to approximately 2,600 in more than 50 countries, including the United Kingdom, Saudi Arabia, Taiwan, Finland, Spain, Brazil and Mexico. This includes four of the Fortune 10.

In December 2009, Secureworks acquired managed security and consulting firm dns Limited.^[12][13] This acquisition expanded Secureworks' operation to include a UK-based operations center and additional offices in London and Edinburgh.^[14]

On January 4, 2011, Dell announced that it would acquire Secureworks to be part of Dell Services. Dell Secureworks officially began operating as a Dell subsidiary on February 7, 2011.^[15]

Dell Secureworks expanded into Australia and New Zealand region in 2013.^[16] Dell Secureworks opened an operations center in Sydney to meet demands from local Australia businesses, the most in demand services in this area being Penetration Testing, forensic investigations and ongoing monitoring of environments for attacks.^[17]

On December 17, 2015, Secureworks filed to go public.^[18][19] Subsequently, on April 22, 2016, announced its IPO, raising $112 million after pricing its IPO at $14 per share. However, the company was expecting the initial price to be between $15.50-$17.50. This was the first tech IPO in the U.S. in 2016.^[20] In August 2017, Secureworks rebranded its logo and changed capitalization of the 'W' in its name to lower case.

In an evolution of its long standing business of selling Managed Security Services (MSSP), in April 2019, Secureworks announced the availability of Red Cloak Threat Detection and Response, a cloud-based, SaaS next-generation SIEM product designed to analyse, detect, investigate and respond to malicious threats across an organizations endpoints, network and cloud environment.^[21] As of June 2020,^[22] the company reported 40% Annual Recurring Revenue growth from its SaaS solution.

Along with 20 other cyber security software providers, Secureworks took part in the MITRE ATT&CK Endpoint Protection Product Evaluation. MITRE ATT&CK® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community. Secureworks Red Cloak Threat Detection and Response was 100% successful at detecting activity for the Persistence, Privilege Escalation, Discovery and Lateral Movement tactics and techniques, which underscores Secureworks’ ability to detect attacks early in the kill chain. Red Cloak TDR had telemetry visibility across the MITRE ATT&CK Framework and was able to capture attacker activity during each step of the evaluation, as well as provide visibility or generated detections across 90% of technique categories used in the evaluation^[23]

May 21, 2020 Secureworks signaled a shift away from a primarily direct go to market model to a channel focused business model with the announcement of the Secureworks Global Partner Program, designed to attract and reward resellers and referral partners who sell Secureworks software.^[24]

On September 3, 2021, Wendy K. Thomas became president and CEO of Secureworks following the retirement of Michael R. Cote.^[25]

In October 2024, Sophos agreed to acquire SecureWorks for $859 million; the acquisition is expected to close in early 2025, subject to regulatory approval.^[26]

The Secureworks Counter Threat Unit (CTU) monitors, tracks, and analyzes threat vulnerabilities of its global client base.^[27][28]

In May 2020, the Secureworks Counter Threat Unit (CTU) research team began publishing Threat Group profiles on the Secureworks website. Threat Groups are "intrusion sets" or "clusters of observed activity"; that exist in cyberspace; attempt to cause harm to organizations or businesses.

The published Threat Group profiles include a summary of the groups, their objectives, other aliases by which the groups are known, and the malware they use. Both criminal and government-sponsored Threat Groups are included.