Pistachio buys Norway's Hugin to add compliance to its cyber platform
What's the deal? Human risk management firm Pistachio AS has acquired Hugin Cybersecurity ASDealroom has a profile for this one. Try Dealroom →, a Norwegian cyber-risk management platform, to build a new cybersecurity compliance and posture management service. Terms were not disclosed. The service is set to launch in 2027.
What each side does: Oslo-based Pistachio, founded in 2023, sells human risk management tools to small and medium-sized businesses, automating personalised security-awareness training and phishing simulations. Hugin helps growing companies assess, manage, and demonstrate their cybersecurity posture and regulatory compliance.
What's the endgame? Pistachio wants to extend its reach from human risk into what comes next: compliance. The planned service will help organisations define, measure, and improve their security posture, add device and application management, and lay the groundwork for an "ambient compliance" product that keeps businesses audit-ready.
Why now? Regulatory demands on companies keep piling up. Pistachio aims to support standards including ISO 27001, the EU's NIS2 directive, SOC 2, and the EU's DORA resilience regulation.
As the UK and EU advance further legislation — the UK's Cybersecurity and Resilience Bill and the EU's Cyber Resilience Act — compliance is becoming a growing burden for smaller firms with stretched teams.
What they're saying: "Bringing Hugin's technology into the platform is a natural next step, allowing us to extend that approach from human risk into compliance," said Pistachio co-founder and chief executive officer Joe Jones.
Hugin co-founder and CEO Jørgen Færevaag framed the core problem for customers: "The issue is not simply knowing that requirements exist, but understanding what applies to your organization, where the gaps are and what needs to be done to address them."
The signal: The deal reflects a broader push to bundle cybersecurity functions as regulation tightens across Europe. By stitching human risk and compliance into one platform, Pistachio is betting that smaller businesses will pay to consolidate rather than juggle separate tools.
Read more: siliconangle.com
Image credit: crystallinelamp
