Nomios, the Keensight Capital-backed pan-European cybersecurity services group, has acquired Orbcom, a 24-year-old Portuguese specialist generating approximately €15 million in annual revenue with 80 professionals [1][1]. The deal gives Nomios its first Iberian presence and a platform anchored by Diamond Innovator Palo Alto Networks partner status, the highest certification available in Portugal [1]. The acquisition targets a Portuguese cybersecurity segment estimated to grow at double-digit annual rates, consistent with the global cybersecurity market's projected 11.6% CAGR from $194,944M in 2024 to $337,758M in 2029 [2][1].
What is Covered in this Article
- Orbcom's vendor certifications and technical differentiation [1][1]
- Portugal's cybersecurity market growth outlook [2][1]
- Orbcom's client base and geographic footprint [1]
- Talent-first integration model and leadership continuity [1]
- Nomios's pan-European consolidation strategy [1]
The News: Nomios announced the acquisition of Orbcom, a leading Portuguese cybersecurity services and IT consulting provider, completing the transaction in September 2026 [1][1]. Orbcom generates approximately €15 million in yearly revenue and employs around 80 professionals [1]. Founded in 2002 and headquartered in Porto, Orbcom holds Diamond Innovator Partner status within the Palo Alto Networks NextWave Partner Program, the highest partner certification available in Portugal [1][1]. The company carries product specialisations in PRISMA SASE, Cortex XDR, Cortex XSOAR, and firewalls, and maintains key partnerships with Netskope, Arista, and Infoblox [1]. Orbcom CEO and Founder Hélder Costa will continue as Portugal MD, with Costa and select management team members becoming shareholders of Nomios Group [1].
Nomios Acquires Orbcom to Plant Its Flag in Iberia
Analyst Take: This acquisition is a textbook example of buying a market position rather than building one. Nomios gains immediate vendor certification depth, a 250-plus client base, and four office locations across Portugal in a single transaction [1][1]. The deal reflects a disciplined consolidation playbook: target the highest-certified operator in an underpenetrated geography, retain the founding team with equity, and layer in the group's broader service portfolio.
Premium Vendor Certifications Create a Durable Moat
Orbcom's Diamond Innovator Partner status within the Palo Alto Networks NextWave Partner Program is not a marketing credential, it represents years of certified engineering investment that competitors cannot replicate quickly [1]. Combined with product specialisations in PRISMA SASE, Cortex XDR, Cortex XSOAR, and firewalls, plus key partner relationships with Netskope, Arista, and Infoblox, Orbcom operates across the full stack of modern network security architecture [1]. Nomios CEO Sébastien Kher specifically cited Orbcom's 'deep technical expertise' and 'premium vendor relationships' as the defining acquisition criteria. For Nomios, these certifications are immediately deployable assets that strengthen its standing with major vendors across the entire European portfolio, not just in Portugal.
Portugal's Market Growth Aligns With Global Cybersecurity Tailwinds
The Portuguese cybersecurity segment covering network security, SASE, XDR, and PAM is estimated to grow at double-digit annual rates [1]. This aligns with the global cybersecurity market forecast to expand from $194,944M in 2024 to $337,758M in 2029 at an 11.6% CAGR [2]. Demand signals from buyers reinforce the outlook: 47.6% of network security decision-makers expect a modest budget increase of 5-15% over the next 12 months [3], and 47.8% of overall cybersecurity decision-makers anticipate similar budget growth [3]. Orbcom's positioning in exactly the segments driving that growth, SASE, XDR, and network security, means Nomios is entering Portugal with a platform already calibrated to capture the highest-velocity spending categories.
Instant Coverage Replaces a Costly Greenfield Build
Orbcom's more than 250 clients spanning retail, automotive, energy, healthcare, and education sectors, across offices in Porto, Braga, Lisbon, and Lamego, give Nomios immediate vertical and geographic density in Portugal [1]. Building equivalent coverage organically would require years of hiring, vendor certification cycles, and client relationship development. The acquisition compresses that timeline to zero. Nomios gains a functioning local operation with established enterprise relationships across five distinct verticals, a critical advantage in a market where long-term client trust and certified technical staff are the primary competitive differentiators.
Equity-Linked Retention Protects the Intangible Asset
The most common failure mode in services acquisitions is talent attrition: the people who made the target valuable leave after close, taking client relationships with them. Nomios addresses this directly by retaining Orbcom CEO and Founder Hélder Costa as Portugal MD, with Costa and select management team members becoming shareholders of Nomios Group [1]. Operating under the 'Orbcom by Nomios' brand preserves the market identity that clients and vendor partners recognize. Costa's statement that joining Nomios is 'a natural next step' and that both organizations share 'the same commitment to technical excellence' signals cultural alignment, not just contractual retention. This structure reduces integration risk materially.
A Tenth Country Reinforces the Consolidation Thesis
With this acquisition, Nomios now operates in ten European countries across more than 36 offices [1]. Keensight Capital, the majority shareholder since November 2023, has backed a deliberate buy-and-build strategy targeting pure-play cybersecurity services specialists with strong vendor relationships and local market leadership [1]. Keensight Partner Jean-Christophe Cini framed the deal as adding 'a new geography, strong vendor relationships and a talented team,' reinforcing that the investment thesis is about building a pan-European platform with genuine technical depth in each market. Each acquisition raises the group's aggregate vendor certification profile and cross-sell surface area, creating compounding strategic value that a single-country operator cannot match.
What to Watch
- Cross-sell conversion: whether Nomios's managed services and SOC capabilities gain traction with Orbcom's 250-plus existing clients in Q4 2026 and Q1 2027 [1]
- Vendor tier progression: whether the combined group's Palo Alto Networks relationship advances to a higher tier at the European level following the addition of Diamond Innovator status in Portugal [1]
- Iberian expansion signals: whether the Portugal beachhead prompts a follow-on acquisition in Spain to complete Southern European coverage in the next two to three quarters [1]
- Budget conversion rate: how the 47.6% of network security decision-makers expecting budget increases translate into contracted revenue growth for Orbcom's SASE and XDR practices through mid-2027 [3]
- Integration execution: whether key Orbcom technical staff remain through the first full year post-close, validating the equity-linked retention model [1]
Sources
1. Nomios expands presence in Southern Europe with leading Portuguese cybersecurity services specialist Orbcom, Nomios, September 2026
2. 1H 2026 Cybersecurity Market Sizing & Five-Year Forecast, Futurum Research, June 2026
3. 1H 2026 Cybersecurity Global Enterprise Decision Maker Survey Report, Futurum Research, June 2026
Disclosure: Futurum is a research and advisory firm that engages or has engaged in research, analysis, and advisory services with many technology companies, including those mentioned in this article. The author does not hold any equity positions with any company mentioned in this article.
Read the full Futurum Group Disclosure.
Author Information
This content is written by a commercial general-purpose language model (LLM) along with the Futurum Intelligence Platform, and has not been curated or reviewed by editors. Due to the inherent limitations in using AI tools, please consider the probability of error. The accuracy, completeness, or timeliness of this content cannot be guaranteed. It is generated on the date indicated at the top of the page, based on the content available, and it may be automatically updated as new content becomes available. The content does not consider any other information or perform any independent analysis.
