Arctic Wolf spent its war chest on Revelstoke to make security response turnkey

Arctic Wolf sells a cybersecurity platform that ingests endpoint, cloud and network data to give companies a unified view of threats.

Arctic Wolf had raised $499M in venture capital plus $401M in debt by October 2023; the Revelstoke price was undisclosed.

Founded in 2012 in Minnesota, Arctic Wolf grew into one of cybersecurity's fastest growers and had already bought RootSecure, a vulnerability-assessment toolkit, and Tetra Defense, a ransomware incident-response vendor.

Revelstoke, founded in 2020 in San Jose with $38M raised, offered drag-and-drop response playbooks, a unified data layer connecting IT and security tools, and LLM-assisted playbook building; 30 of its people joined Arctic Wolf, with CEO Bob Kruse moving into product-line sales.

SOAR was the response half its detection-led platform lacked, and buying it was faster than building.

Schneider had publicly committed part of the October 2022 $401M debt raise to M&A; Revelstoke executed that plan.

Bundling automated response into the base platform raises switching costs without asking customers to buy another module.

With the IPO window shut, debt-funded tuck-ins kept the growth story compounding without a down-priced equity round.

Raising debt in a downturn pays only with a deployment plan; naming M&A as the use of funds a year early turned this acquisition into a promise kept, not a pivot.

As of October 10, 2023, Arctic Wolf said integrating Revelstoke would make SOAR outcomes 'essentially turnkey'; it was the company's third acquisition, with over 3,000 customers and an estimated $200M-plus in ARR.