CyberFOX acquires Optimize365 to add M365 security to its portfolio
CyberFOX, the Tampa-based cybersecurity software provider focused on small and mid-sized organisations, has acquired Optimize365, a specialist in Microsoft 365 tenant security. The deal extends CyberFOX's existing lineup of privileged access management (PAM), password management, AI-powered DNS filtering and Zero Trust Network Access (ZTNA) tools into the cloud productivity layer that the majority of its target customers rely on daily.
Financial terms were not disclosed. The acquisition is the second bolt-on deal CyberFOX has completed since its nine-figure growth investment, led by Level Equity and Radian Capital, closed in February 2026. The first was the June 2026 purchase of SASE provider Timus Networks. The pace of acquisition suggests CyberFOX is executing a deliberate platform consolidation strategy, assembling a unified access-security stack rather than growing organically.
What Optimize365 brings
Optimize365's core capability is continuous monitoring of Microsoft 365 tenant configurations, flagging permission changes and configuration drift that can quietly widen an organisation's attack surface. Misconfigured M365 tenants are a well-documented vector: default settings, overly permissive sharing policies and stale guest accounts regularly feature in incident-response reports across the industry.
Chief executive David Bellini said the acquisition was intended to give IT teams "a comprehensive suite of security platforms that protects the full access attack surface, without adding more complexity." Adam Slutskin, CyberFOX's chief revenue officer, framed Optimize365 as a natural extension for lean IT departments that lack dedicated cloud-security staff.
Optimize365 will continue to operate under its existing brand in the near term, and the company confirmed that current partners and customers will see no disruption to service levels, support arrangements or contract terms. Integration into CyberFOX's partner programme and product roadmap is expected over the coming quarters.
Market context and competitive landscape
The market for Microsoft 365 security tooling has become increasingly crowded. Vendors including Varonis, Netwrix and a range of well-funded specialists compete in the configuration assessment and SaaS security posture management (SSPM) space, while Microsoft itself has expanded its Secure Score and Defender for Office 365 capabilities. For managed service providers serving SMB clients, the appeal of sourcing M365 monitoring from the same vendor as their PAM and network-access tools is primarily operational: fewer consoles, a single renewal conversation, and consolidated partner economics.
CyberFOX's positioning as an affordable, low-overhead alternative to enterprise-grade platforms is coherent for its target market, though the company has not published comparative benchmark data or customer retention figures. Its ability to cross-sell Optimize365 through the Timus SASE partner channel will be a near-term test of whether the platform strategy is gaining traction.
Regulatory read-across
Microsoft 365 security posture is directly relevant to several compliance frameworks that CyberFOX's SMB and mid-market customers are likely to encounter. Cyber Essentials in the UK, SOC 2 Type II in the US and the EU's NIS2 directive (which began applying to a broader set of entities in late 2024) all have provisions touching cloud application configuration and access control. Automated configuration drift detection of the kind Optimize365 provides can materially reduce the manual effort required to evidence compliance, making the acquisition commercially timely as NIS2 enforcement actions begin to accumulate.
CyberFOX's next key milestone will be articulating a unified product roadmap that connects PAM, SASE, DNS filtering and M365 monitoring into a coherent control plane, along with named customer wins that demonstrate the combined platform is being adopted rather than simply offered.