IBM acquires compliance security company Spanugo
Strategic acquisition of Spanugo enables IBM to deliver secure public cloud capabilities to clients in highly regulated industries

IBM announced today it has acquired Spanugo, a California-based provider of cloud cyber security posture management solutions.
To further meet the security demands of its clients in highly regulated industries, IBM will integrate Spanugo into its public cloud.
IBM previously announced its development of the world’s first financial-services-ready public cloud to satisfy requirements for regulatory compliance, security and resiliency for financial services institutions. With the acquisition of Spanugo, IBM is accelerating the availability of a security control center that will enable clients to establish compliance profiles, manage controls and monitor compliance in real-time.
Howard Boville, senior vice president and Head of Cloud Platform at IBM shared in a statement: “IBM is committed to building the industry’s most secure and open public cloud for business. With the acquisition of Spanugo, we have taken another major step in advancing IBM’s differentiated capabilities in security and compliance for our enterprise clients, including those in highly regulated industries,”
“Bringing Spanugo’s technology into our financial services-ready public cloud will help provide our clients with evidence of their ongoing compliance, in real-time,” Boville added.
Hillery Hunter, CTO of IBM Cloud added her own thoughts, telling IT Pro: “Strategically, this acquisition fits into the category of ongoing investments in our public cloud for regulated industries. In that sense, it means financial services, healthcare, all those clients, we see strategically that there is a second wave of public cloud conversations going on.
"This has only been accelerated in recent times and has to do with mission-critical workloads. When doing that, you have increasing concerns about security and the compliance of that cloud environment.”
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Hunter explained the Spanugo acquisition will encourage IBM’s clients to “have even greater confidence in running mission-critical workloads on the public cloud and in transforming their overall businesses.”
As clients transfer sensitive workloads to the cloud, security and compliance become more complex. For businesses in highly regulated industries, such as financial services or healthcare, cloud environments are most useful when they are approved for sensitive information and are able to effectively run workloads subject to such strict regulatory and compliance guidelines.
Spanugo’s technology is not only able to demonstrate cyber security compliance in real-time but it also provides continuous cloud security to reduce the likelihood of a successful cyber attack.
“Spanugo’s strong domain knowledge and experience in security posture management is a natural complement to IBM’s public cloud offerings,” said Doc Vaidhyanathan, co-founder and chief product officer at Spanugo.
“By joining IBM on its mission to be the most secure public cloud for the enterprise, we’re able to deeply serve businesses across industries that require verifiable, audit-ready, real-time cybersecurity posturing,” Vaidhyanathan continued.
Spanugo was founded in 2017 by Doc Vaidhyanathan, Doss Karan and Janga R Aliminati. The company is headquartered in Santa Clara, California.
-
Bigger salaries, more burnout: Is the CISO role in crisis?
In-depth CISOs are more stressed than ever before – but why is this and what can be done?
By Kate O'Flaherty Published
-
Cheap cyber crime kits can be bought on the dark web for less than $25
News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
By Emma Woollacott Published
-
IBM completes HashiCorp acquisition after regulatory approval
News IBM has completed its $6.4 billion acquisition of cloud automation and security firm HashiCorp,
By Emma Woollacott Published
-
IBM eyes Oracle expertise gains with latest acquisition
News The deal aims to help IBM address the complexities of public sector cloud transformation
By Emma Woollacott Published
-
UK regulator to investigate IBM takeover of HashiCorp
News The CMA is concerned that the merger could affect competition in the cloud services market
By Emma Woollacott Published
-
Channel Focus: All you need to know about IBM's partner program
How Big Blue seeks to go deep, tackling enterprise complexity: A brief guide to the role of partners in IBM's plan to accelerate software and consulting sales.
By Fleur Doidge Published
-
Put AI to work for talent management
Whitepaper Change the way we define jobs and the skills required to support business and employee needs
By ITPro Published
-
Let’s rethink the recruiting process
whitepaper If you designed your recruiting process for a new company, what would you automate to attract and hire the best talent?
By ITPro Published
-
The power of AI & automation: Productivity and agility
whitepaper To perform at its peak, automation requires incessant data from across the organization and partner ecosystem.
By ITPro Published
-
Everything you need to know about IBM’s HashiCorp acquisition
News IBM’s acquisition of HashiCorp represents a major signal of intent for the tech giant and its hybrid cloud and AI ambitions
By Steve Ranger Last updated