M&A

Oslo-based Pistachio acquires Hugin.io to expand into cybersecurity compliance

September 2, 2026

Cybersecurity

M&A

Key Facts

Signal Type

M&A

Industry

Cybersecurity

Companies

Pistachio, Hugin.io, Guardsix, Logmanager, Summa Equity

Date

September 2, 2026

What Happened

Oslo-based Pistachio, an AI-powered human risk platform, announced the IP acquisition of Hugin.io, a Norwegian cyber-risk management platform. The company, which has over 1,000 corporate customers, will use the acquisition to extend its product beyond human risk into automated compliance management. Financial terms were not disclosed.

Who Is Affected

Pistachio’s existing SMB and mid-market customers will be directly affected, as the platform will now offer compliance automation for frameworks like ISO 27001, NIS2, SOC 2, and DORA. The acquisition also impacts Hugin.io’s co-founder Jørgen Færevaag, who will lead the new compliance initiative. Sales reps targeting cybersecurity or compliance tooling should note that Pistachio is now a prospect for compliance automation solutions.

Market Impact

This acquisition positions Pistachio to compete in the growing compliance automation market, particularly for resource-constrained SMBs and mid-market firms facing increasing regulatory demands. The move also signals a broader trend of human risk platforms expanding into adjacent security domains. Separately, the article notes a second cybersecurity M&A event: Danish Guardsix (formerly Logpoint, backed by Summa Equity) acquired Czech Logmanager, expanding its log management capabilities in Central Eastern Europe.

What to Watch

Watch for Pistachio’s product roadmap and integration timeline for Hugin.io’s technology. The company’s ability to automate compliance for frameworks like NIS2 and DORA will be critical for winning regulated customers. Additionally, the Guardsix-Logmanager deal may create new opportunities for vendors serving sovereign security operations platforms.

Source:

EU-Startups

Get cybersecurity signals in your CRM

Data breaches, ransomware events, funding rounds, and M&A across security vendors and targets.

Book a 15 min call
Dominykas Rukas - Revenanas