"We have been looking for a capability to add advisory and strategy services as well as proactive security services," TekStream CEO Rob Jansen told ISMG.
TekStream's strategic shift from MDR to proactive security
TekStream, an Atlanta-based digital resilience vendor, announced the acquisition of ImagineX's cybersecurity business to broaden its offerings beyond managed detection and response (MDR). The deal was positioned as a deliberate shift to "preventing incidents, assessing risk posture and aligning security strategy with business objectives," Jansen said. According to TekStream, the acquisition adds advisory, governance, risk and compliance (GRC), and vulnerability management capabilities to its existing detection and response core.
ImagineX cybersecurity business and leadership
ImagineX's cybersecurity unit brought roughly 25 employees to the deal and was part of a larger ImagineX operation that included digital services, software engineering, data and artificial intelligence. The division has been led since 2015 by Neel Sata, whose prior experience includes four-and-a-half years as a client service lead at Slalom Consulting and more than 11 years as a senior manager at Accenture focused on IT consulting services.
Closing the advisory-to-operations gap, says TekStream
Taylor Morgan, TekStream's Chief Solutions Officer, framed the acquisition as a way to deliver a continuous security life cycle—from identifying vulnerabilities through advising on remediation and into detection and response. Morgan said TekStream previously excelled in detection and response but "lacked capabilities in areas such as vulnerability management, governance, risk and compliance, and virtual CISO advisory service."
He described a common industry problem: advisory recommendations that are created but never implemented because of organizational silos or coordination failures. "If you're going to an organization for strategy and advice and you're going to another organization for detection and response, there's a lot that gets lost in the sauce," Morgan said. Combining advisory and operational teams, he argued, helps ensure that strategic insights are translated into operational improvements within security operations centers (SOCs).
Integrating attacker tactics and automation into workflows
Morgan and Jansen emphasized automation as central to the combined company's approach. Modern offensive techniques, they warned, increasingly chain exploits and move across systems at machine speed. "What used to take months or weeks now takes minutes, and that fundamentally changes the approach defenders are going to have to take to the market," Morgan said. "So, we can't sit back and have human-speed defensive capabilities that are going to be able to stand up to machine-speed offense."
The acquisition is meant to reduce manual processes, improve how threat intelligence is ingested and used, raise SOC efficiency, and lower the volume of low-value alerts. TekStream plans to fold advisory insights and attacker tactics into automated workflows so that proactive risk identification and remediation recommendations feed directly into detection and response tooling and playbooks.
What this means for CISOs, TekStream customers, and ImagineX clients
- CISOs: The combined offering promises a single partner able to advise on tooling, people, process and technology and to carry recommendations into operational SOC functions. Morgan said the "holistic motion" should reduce the need to manage multiple vendors for strategy, vulnerability management and detection.
- TekStream customers: Jansen and Morgan will measure success by attach rates — the adoption of newly offered proactive services among TekStream’s existing client base. Strong attach rates will be treated as validation that the acquisition fills previously missing capabilities.
- ImagineX clients: TekStream will also watch the uptake of its MDR offerings among ImagineX’s customers. Jansen said that attach rates across both sides of the business signal whether the integration is working as planned.
TekStream’s acquisition of ImagineX’s cybersecurity business is presented as a tactical consolidation: advisory and vulnerability services joined to an MDR core to create what executives describe as a continuous security lifecycle. The company has named attach rates — both cross-selling proactive services into its client base and selling MDR to ImagineX clients — as the primary, measurable indicator of success. If those metrics rise, TekStream will argue the deal has closed a long-noted gap between strategy and protection; if they do not, the stated challenge — turning advisory recommendations into operational reality — will remain the crucial test.
https://www.govinfosecurity.com/tekstream-targets-proactive-security-imaginex-cyber-buy-a-31507
