Full Report
Everfield Germany GmbH has signed a definitive agreement to acquire Rhebo GmbH. Completion of the transaction remains subject... The post Everfield Germany to acquire Rhebo, expanding OT cybersecurity footprint across DACH industrial markets appeared first on Industrial Cyber.
Analysis Summary
# Industry News: Everfield Germany to Acquire Rhebo, Strengthening OT Cybersecurity Ecosystem
## Summary
Everfield Germany GmbH has finalized a definitive agreement to acquire Leipzig-based Rhebo GmbH, a specialist in OT security monitoring and anomaly detection. This acquisition marks a significant expansion of Everfield’s B2B software portfolio and signifies a strategic push into the industrial cybersecurity market across the DACH (Germany, Austria, Switzerland) region.
## Key Details
- **Date:** Announced May 4, 2026
- **Companies Involved:** Everfield Germany GmbH (Buyer); Rhebo GmbH (Target); Landis+Gyr (Seller)
- **Category:** Mergers & Acquisitions (M&A)
## The Story
Everfield, a buy-and-hold investor focusing on European B2B SaaS businesses, is acquiring Rhebo from the Swiss-listed Landis+Gyr Group. Founded in 2014, Rhebo provides critical infrastructure and large enterprises with non-intrusive network monitoring and anomaly detection for OT and IIoT environments.
The deal follows a strategic realignment by Landis+Gyr to refocus on its core business. Under the new ownership, Rhebo will retain its Leipzig headquarters and its current management team, led by CEO Gerald Müller. The acquisition allows Rhebo to exit its status as a subsidiary of a hardware-centric group and join a software-specialized ecosystem, positioning it to better address the surging demand for regulatory compliance driven by NIS2 and the Cyber Resilience Act.
## Business Impact
### For the Companies Involved
- **Everfield:** Gains deep technical expertise in OT security and strengthens its "Business and Industrial Systems" vertical. This complements its existing investment in ondeso (OT management software).
- **Rhebo:** Gains access to Everfield’s dedicated software growth resources and a long-term, stable ownership structure that supports product R&D.
### For Competitors
- **Pure-play OT Security Vendors:** Competitors like Nozomi Networks and Claroty now face a more integrated European rival that is backed by a diversified software group with a strong local DACH presence.
- **Regional Providers:** The consolidation of Rhebo and ondeso under Everfield creates a formidable "German-made" software stack that may appeal to nationalistic procurement preferences.
### For Customers
- **Stability:** Existing Rhebo customers gain assurance of long-term ownership and continued local support in Germany.
- **Improved Integration:** Potential for deeper integration between Rhebo’s anomaly detection and other Everfield-owned industrial software tools.
### For the Market
- **M&A Trend:** This highlights a shift where industrial cybersecurity is viewed as a foundational software vertical rather than a niche hardware-adjacent add-on.
- **European Sovereignty:** The deal emphasizes "digital sovereignty," keeping critical security technology under European ownership.
## Technical Implications
Rhebo’s technology focuses on **Early Threat Detection** and **Anomaly Detection** without impacting industrial uptime. By integrating into Everfield’s ecosystem, there is technical potential for a more unified "OT Operations and Security" platform, bridging the gap between OT Asset Management (ondeso) and OT Network Security (Rhebo).
## Strategic Analysis
- **Market Positioning:** Everfield is positioning itself as the leading European consolidator of specialized industrial software, targeting the regulatory compliance rush in the DACH region.
- **Competitive Advantage:** The combination of "Leipzig-developed" technology and Everfield’s "buy-and-hold" philosophy offers a trust-based alternative to venture-backed startups or US-based conglomerates.
- **Challenges:** Integrating diverse software cultures and maintaining Rhebo’s technical edge while navigating the complex regulatory environments of European critical infrastructure.
## Industry Reactions
- **Management Sentiment:** Rhebo CEO Gerald Müller noted that Everfield’s focus on B2B software is a "strong opportunity to advance European digital sovereignty."
- **Analyst View:** Market observers see this as a logical "carve-out" for Landis+Gyr, allowing Rhebo to thrive in an environment specifically designed for scaling software-as-a-service.
## Future Outlook
- **Predictive Growth:** Expect Rhebo to aggressively target NIS2 compliance projects across German "Mittelstand" and utility companies in the next 18–24 months.
- **Expansion:** Everfield is likely to continue its acquisition streak in the OT space to build a comprehensive "Industrial Security Suite."
## For Security Professionals
Practitioners in the DACH region should monitor the evolving Rhebo-ondeso partnership. The migration from Landis+Gyr to Everfield likely means an update to product roadmaps with a heavier focus on SaaS delivery and cross-platform visibility. For those focused on NIS2 compliance, Rhebo remains a key regional sovereign solution for network monitoring requirements.