The Business of Cyber Security

Vista Equity Partners

Vista Equity Partners is a software-focused mega-sponsor with a deep cybersecurity portfolio and one of the most codified operating playbooks in private equity. Where Thoma Bravo is oriented around cyber take-privates, Vista is an enterprise-software specialist that owns a substantial cyber book.

Who they are

Vista Equity Partners is a global investment firm that invests exclusively in enterprise software and technology-enabled businesses — the purest software specialist among the mega-funds. As of Mar 31, 2026 it managed ~$103B in AUM (down modestly from ~$107B at Sep 30, 2025, reflecting the software reset) across a portfolio of 90+ software companies, having crossed the $100B threshold in 2023. It closed its eighth flagship fund at >$20B in 2024, and invests across four strategies — Flagship (large-cap/buyout), Foundation (middle market), Endeavor (lower-middle market), and Perennial (permanent capital) — plus a Vista Credit Partners arm that lends to the same software universe. That credit arm matters: like Thoma Bravo, Vista can finance parts of its own and others' software LBOs (Lenders & Credit).

Founded by Robert F. Smith in 2000, Vista's defining contribution to private equity is not a deal — it is a method. The firm built the buyout industry's most systematic operating model for software, codified in a set of internal "best practices," a standardized playbook applied to every portfolio company, and a dedicated operating organization (Vista Consulting Group). Where many sponsors underwrite a thesis and hope the operators deliver, Vista treats operational improvement as a manufacturable, repeatable input.

The cyber portfolio (and the broader software book around it)

Vista — selected cyber investments ($ value) KnowBe4 (take-private) $4.6B Securonix (growth) $1.0B+ Critical Start (growth) $215M Datto (acq. 2017→sold) exited SecureLink (acq.→sold) exited Blue = take-private control · gold = growth/structured · green = realized exit
Vista's cyber checks span control take-privates (KnowBe4) and large structured-growth investments (Securonix, Critical Start). Values as reported at announcement. Datto and SecureLink illustrate the firm's exit record — buy, scale, sell.
Asset Entry Sub-segment Playbook note
KnowBe4 announced Oct 11 2022, completed Feb 1 2023; $4.6B take-private ($24.90/sh) Security-awareness / human-risk mgmt Founder Stu Sjouwerman stayed CEO (rolled equity w/ KKR + Elephant, ~$682M); pushed hard into AI-driven "human risk management" post-close; now serves 70k+ orgs. See 06f
Securonix 2022, $1.0B+ growth round (Vista-led) SIEM / SecOps (cloud-native) Big structured-growth check into a next-gen SIEM challenger — the bet against Splunk-era incumbents (03e)
Critical Start $215M growth investment MDR Vista exposure to the managed-detection layer (04b)
Datto Acquired 2017; sold to Kaseya, $6.2B (2022) MSP backup/security The model in one asset — buy, scale via the operating playbook, exit to a strategic
SecureLink Acquired; sold to Imprivata Privileged remote access Tuck-in that became a strategic's bolt-on — Vista feeding the Thoma Bravo/Imprivata identity build

The portfolio reflects Vista's cyber posture: fewer, larger, software-centric bets than Thoma Bravo's serial take-private cadence, and a willingness to write large structured-growth checks (Securonix, Critical Start) rather than only control buyouts. That growth-equity flexibility lets Vista enter a company before it is a clean take-private target and compound from there.

The operating model

Vista's edge is the Vista Consulting Group (VCG) and the standardized "best-practices" playbook applied to every company on day one:

The difference from Thoma Bravo is one of emphasis, not kind: TB builds category leaders by merging assets it owns (Ping+ForgeRock, Exabeam+LogRhythm); Vista builds operating systems it installs into any asset. Both harvest the same multiple arbitrage (12); they just pull different primary levers.

Exits

Vista's cyber-adjacent exit record: Datto sold to Kaseya for $6.2B (2022), SecureLink sold to Imprivata, Ping Identity-era assets rotated into the consolidation. The routes are the standard three — strategic sale (most common; the platforms are the buyers, 03/08), secondary buyout (sponsor-to-sponsor), or re-IPO when the window is open (Deal Structures). A scaled, re-priced, operating-systematized software asset is the type of asset a strategic acquirer or a secondary sponsor typically pays up for.

Risks

Cross-references: Private Equity, Thoma Bravo, Sponsor Landscape, PE Operating Model, Value Creation, Key People.


Updated 2026-08-16 18:13 UTC · © El Dorado Capital · el-doradocapital.com · Market intelligence for informational purposes only; not investment advice.