Pistachio’s Expansion into Cybersecurity Compliance with Acquisition of Hugin.io

Pistachio, a human risk platform powered by AI and based in Oslo, made an announcement today regarding its acquisition of Hugin.io, a cyber-risk management platform from Norway. Hugin.io assists growing businesses in evaluating, managing, and showcasing their cybersecurity posture and compliance with regulations.

This acquisition by Pistachio is aimed at expanding its offerings beyond human risk to include compliance management, thereby enhancing its value proposition for small and mid-market organizations. The financial details of this transaction were not disclosed.

Joe Jones, the CEO and co-founder of Pistachio, stated, “Organizations are facing increasingly complex security requirements, but many lack the resources to effectively manage them. At Pistachio, we believe that cybersecurity should not be a constant burden on already strained teams. Integrating Hugin’s technology into our platform allows us to extend our approach from human risk to compliance, assisting more organizations in building resilience without adding unnecessary complexity.”

Established in 2023, Pistachio is a cybersecurity company that develops human risk management solutions for small and mid-market businesses. The company’s platform automates security awareness training and identifies insider threats by adapting to each employee’s role and conduct.

In 2023, Pistachio announced a funding round that raised €3.25 million, with Signals VC leading the investment. The company currently assists organizations in addressing social engineering and insider threats, two major human risk factors in cybersecurity. The acquisition of Hugin.io now adds compliance management as a new capability to its platform.

Jørgen Færevaag, co-founder and CEO of Hugin.io, commented, “Cybersecurity poses significant challenges for growing businesses. The issue lies not just in recognizing existing requirements but in understanding their relevance to your organization, identifying gaps, and taking necessary actions to address them. Hugin’s technology simplifies this process and makes it more accessible. By joining forces with Pistachio, this technology will reach a broader customer base as part of a comprehensive cybersecurity platform, empowering those scaling businesses with the knowledge they need.”

The new product is scheduled for an official launch in 2027 and will offer a range of capabilities to assist organizations in defining, measuring, and enhancing their security posture, along with tools for managing devices and applications. Pistachio emphasizes that through these capabilities, the compliance product helps growing businesses maintain continuous security readiness and audit compliance without the burden of manual certification processes.

Once launched, Pistachio’s product will support organizations in meeting standards and regulations such as ISO 27001, NIS2, SOC 2, and DORA, thereby making compliance not just a legal necessity but a vital business requirement. By automating this burden, Pistachio aims to assist smaller organizations in building cyber resilience without the need for extensive resources.

Headquartered in Oslo with additional offices in London and Valencia, Pistachio has surpassed 1,000 customers, primarily across Europe.