Barracuda acquires Evo Security to deliver complete identity resilience for the AI era

In the era of agentic AI and rapidly scaling cyber threats, protecting digital identifiers has become paramount for securing enterprise perimeters. Recent threat intelligence reports show that over 71% of modern cyberattacks now involve stolen, valid credentials. Cybercriminals have shifted their strategy: instead of attempting to hack through traditional perimeter defenses, they simply buy or harvest authentic credentials to log in undetected.

To directly address these complex challenges, Barracuda Networks, Inc., a global leader in cyber resilience platforms, announced its acquisition of Evo Security — an identity and access management (IAM) provider built from the ground up for multi-tenant, scalable environments. This tactical integration natively expands the core capabilities of the BarracudaONE platform.

By merging Evo Security’s purpose-built identity solutions with existing security mechanisms, BarracudaONE presents a unified, end-to-end identity security framework. Organizations can now leverage comprehensive digital protection without the operational friction of manually orchestrating fragmented third-party utilities.

The four layers of identity resilience within BarracudaONE

The unified architecture delivers a robust, multi-layered identity defense model explicitly structured to close the visibility and security gaps that attackers commonly exploit:

1. Stopping identity and privilege misuse

Uncontrolled administrative privileges and inconsistent authentication policies often leave directories exposed. The integrated IAM tools enforce precise rules regarding who can access enterprise systems, when, and how, effectively removing permanent standing privileges across all endpoints.

2. Eliminating broad, risky network access paths

Traditional network architectures give users excess horizontal freedom, expanding the potential blast radius during a breach. Through Barracuda SecureEdge, identity-driven, least-privilege Zero Trust Network Access (ZTNA) replaces broad routing paths with continuous contextual verification.

3. Protecting identity systems from disruption

Accidental configurations or malicious alterations to directories like Microsoft Entra ID can halt operations entirely. The Barracuda Entra ID Backup module continuously safeguards organizational groups, users, and rules, allowing administrators to instantly recover system integrity.

4. Detecting identity-centric attacks in motion

Lateral movement and privilege escalation frequently evade standalone security point products. Barracuda Managed XDR correlates telemetry across email accounts, cloud environments, local servers, and network edges to isolate and neutralize active credential-driven attacks before they spread.

Consolidated platform features

By combining identity security layers into a single platform, organizations can move away from separate point solutions. The unified approach brings multi-factor authentication, single sign-on, and privileged access under one agent and one dashboard:

Identity management capabilities

• Multi-factor authentication (MFA): Prevents credential-based attacks directly at Windows, macOS, and Linux endpoints.
• Single sign-on (SSO): Streamlines web application authentication over SAML protocols, eliminating corporate password sprawl.
• Cloud RADIUS: Secures and authenticates connections to firewalls and common virtual private networks (VPNs).
• Help desk verification: Mitigates social engineering risks by giving IT teams an automated method to verify user identities over support channels.

Privileged access control

• Technician elevation: Enforces Just-in-Time (JIT) administrative permissions with automatic password rotation to ensure support accounts are never left exposed.
• End user elevation: Grants automated, time-bound local admin rights to regular staff for specific operations without giving them permanent administrative accounts.

Key differences in identity security models

Traditional enterprise IAM solutions

• Complex deployment: Requires weeks of configuration, major adjustments to infrastructure, and significant engineering resources.
• Fragmented utility: Forces administrators to maintain separate standalone tools for PAM, multi-factor authentication, and folder backups.
• High overhead: Leads to unpredictable costs and increased operational strain on internal IT staff.

The updated BarracudaONE ecosystem

• Rapid deployment: Built for quick setup and integration without requiring a complete removal and replacement of the existing security stack.
• Consolidated architecture: Integrates MFA, SSO, PAM, ZTNA, and Managed XDR into a single automated engine.
• Native multi-tenancy: Designed to seamlessly scale security management across thousands of isolated customer environments from one dashboard.

For modern enterprises looking to fulfill compliance standards, meet strict cybersecurity insurance requirements, and reduce digital risk, this consolidation offers a comprehensive and efficient route forward. As the official distributor of Barracuda Networks, Softprom provides complete lifecycle support, expertise, and pilot project assistance for evaluating these modern cloud architectures.