SGS Expands Cybersecurity Push With Prescient Security Stake

SGS said Oct. 2 that it completed the acquisition of a majority stake in Prescient Security, a U.S.-based provider of information compliance and cybersecurity services, expanding the Swiss testing, inspection and certification group’s Digital Trust platform.¹

The transaction adds more than 350 Prescient employees and more than 5,000 clients worldwide. Prescient’s services include information-security certification, payment security, data protection, cybersecurity and penetration testing.² Financial terms were not disclosed. The deal was also noted in European equity-market coverage as a majority-stake acquisition by SGS.⁶

For SGS, the significance is both strategic and additive. The company is targeting at least CHF 200 million in additional Digital Trust revenue by 2027 compared with 2023 and described Prescient as an important step in expanding that platform.² In practice, the deal moves digital trust closer to SGS’s core testing and certification model, rather than treating it as an adjacent advisory line.

What SGS is buying

Prescient gives SGS a broader bench in enterprise cyber assurance. The company provides certification and compliance services across SOC 2, ISO, PCI DSS, HITRUST, FedRAMP and CMMC, according to the SGS and Prescient release.³

That standards coverage matters for regulated customers in financial services, healthcare, retail, technology and defense. In those sectors, security controls increasingly must be tested, documented and evidenced for customers, regulators and auditors.¹

The acquisition also adds offensive-security and penetration-testing capabilities. SGS said Prescient combines expert-led manual testing, scalable digital approaches and AI-assisted models, supported by proprietary automation technology for compliance workflows and security processes.¹

Prescient’s own description emphasizes high-growth software-as-a-service and enterprise customers, with services that bridge offensive testing and compliance readiness.³

Why TIC firms are moving into digital trust

Traditional testing, inspection and certification companies built their position by validating physical products, industrial processes and regulated supply chains. The Prescient deal reflects a broader shift: the same customers now need assurance for software, cloud environments, payment systems, data handling and cyber controls.

That makes digital trust a natural extension of the TIC model. Regulated companies are being asked to prove not only that products meet technical standards, but also that digital systems are resilient, compliant and auditable.

In SGS’s framing, the acquisition gives it a more complete Digital Trust portfolio, particularly in digital trust audits, while combining Prescient’s capabilities with SGS’s independence, technical depth and global network.⁴

The timing is notable because cybersecurity, data protection and artificial intelligence governance are increasingly board-level operating risks. Buyers are not only looking for point-in-time cyber assessments. They want repeatable evidence, continuous validation and assurance that can stand up to procurement reviews, customer due diligence and regulatory scrutiny.

Prescient’s focus on audit-ready evidence and continuous validation fits that demand.³

The M&A logic

The acquisition gives SGS a U.S.-based platform in a market where cyber assurance and compliance services are becoming part of enterprise risk management. Market-facing summaries described the transaction as an expansion of SGS’s cybersecurity and digital compliance footprint and a way to integrate digital security testing into its global TIC framework.⁸

That is the central rationale: SGS is not just buying a niche cyber services provider. It is buying people, clients, standards expertise and automated workflows that can be distributed through a global assurance network.

If SGS can integrate Prescient effectively, it can cross-sell cyber and compliance services to customers that already rely on it for testing, inspection and certification in other domains.

The integration risk is that cyber services operate on faster cycles than many legacy TIC businesses. Penetration testing, cloud compliance and AI-assisted security workflows require rapid tool development, specialized talent and continuous updating as threats and standards evolve.

SGS’s challenge will be to preserve Prescient’s technical velocity while embedding it into a larger public-company platform.

What to watch

The first marker is revenue contribution. SGS has set a target of at least CHF 200 million in additional Digital Trust revenue by 2027 versus 2023, giving investors and customers a concrete benchmark for whether acquisitions are converting into platform growth.²

The second is portfolio integration. Prescient brings capabilities in SOC 2, ISO, PCI DSS, HITRUST, FedRAMP and CMMC. SGS brings global reach, brand trust and a long-standing assurance model.³ The opportunity is to turn those ingredients into a unified digital-trust offering for regulated customers operating across multiple jurisdictions.

The third is whether digital trust becomes a recurring assurance relationship rather than a project-based cyber service. If customers use SGS for continuous evidence, compliance readiness, penetration testing and certification support, the acquisition could help reposition digital trust as a core growth platform inside the TIC sector.