Pistachio Acquires Hugin.io for Cybersecurity Compliance

Oslo-based Pistachio, an AI-driven platform focused on human risk management, has strategically acquired the intellectual property of Hugin.io. This move significantly expands Pistachio's capabilities into the critical domain of cybersecurity compliance, aiming to serve small and medium-sized businesses (SMBs) and mid-market organizations more comprehensively.

The integration of Hugin.io's technology will allow Pistachio to offer a more robust solution that moves beyond identifying human-related security vulnerabilities to actively managing and demonstrating regulatory adherence. This is particularly relevant as businesses face increasingly stringent cybersecurity mandates and a growing threat landscape. The financial specifics of the transaction were not disclosed.

Joe Jones, CEO and co-founder of Pistachio, highlighted the market's need for accessible security solutions. "Organizations are grappling with complex security demands but often lack the necessary resources," Jones stated. "Our vision for Pistachio has always been to make effective cybersecurity manageable for teams under pressure. Incorporating Hugin's expertise into our platform is a logical progression, enabling us to extend our approach from human risk to encompass compliance, thereby enhancing resilience for a wider range of companies without introducing added complexity."

Founded in 2023, Pistachio has already established itself by automating security awareness training and insider threat detection, tailoring its approach to individual employee roles and behaviors. The company previously secured €3.25 million in funding led by Signals VC in 2023. The addition of Hugin.io's compliance management features is set to launch in 2027, promising a suite of tools designed to help businesses define, measure, and improve their security posture, including device and application management.

Jørgen Færevaag, co-Founder and CEO of Hugin.io, commented on the strategic alignment. "Cybersecurity presents a major hurdle for growing businesses. Understanding applicable requirements, identifying gaps, and implementing solutions can be daunting. Hugin's technology simplifies this process. Partnering with Pistachio will expose our technology to a much larger audience as part of a unified cybersecurity platform, empowering scaling businesses with essential know-how."

The forthcoming product will support adherence to key standards and regulations such as ISO 27001, NIS2 directive, SOC 2, and DORA. This expansion comes at a time when compliance is evolving into a core business imperative, driven by legislation like the UK's Cyber Security and Resilience Bill and the EU's Cyber Resilience Act. Pistachio aims to automate this compliance burden, enabling smaller entities to achieve robust cyber resilience without the need for enterprise-scale resources.

With over 1,000 customers primarily across Europe and offices in Oslo, London, and Valencia, Pistachio is well-positioned to integrate these new compliance functionalities. The move underscores a broader market trend where integrated platforms offering both risk mitigation and compliance management are becoming increasingly valuable for businesses navigating the complex digital security environment.