One exit accomplished two things within the same company: first spinning the business out of the legacy group for independent operation, then rebuilding the technology stack with AI. EQT's handling of Ontinue provides a pathway that links post‑investment transformation with a sale.
Fact
- September 16, 2026, the EQT Mid Market Europe fund announced that it had signed a definitive agreement to sell Ontinue to Quorum Cyber; EQT did not disclose the transaction price or multiple of return.
- Ontinue offers managed extended detection and response (MXDR) services for the Microsoft ecosystem, delivering to European and U.S. customers through a 24/7 delivery model, serving 250+ clients that include enterprises, NGOs and institutions.
- Its proprietary ION platform is designed around the Microsoft security ecosystem and uses agentic AI automation to improve the speed, efficiency and accuracy of threat detection and response.
- Ontinue originally was the managed detection and response business within Open Systems; 2023 it was carved out into an independent company as technology, organization and strategic priorities diverged. EQT has been investing in Open Systems since 2017, helping it transition from a cybersecurity managed‑service provider to a SASE business; during EQT's holding period Open Systems' revenue nearly doubled and EBITDA grew by more than three times, and it was sold to Swiss Post in 2024.
- After becoming an independent company, EQT helped Ontinue establish a standalone organization, strengthen its management and international go‑to‑market team, and merge three technology platforms into a single AI-native, automation-first platform; the company also completed three add‑on acquisitions focused on data science, AI and cybersecurity services.
- EQT said that during its holding period, Ontinue's size roughly doubled and its financial structure continued to improve.
- Christian Küpper, Director at EQT Private Equity responsible for the investment, said the team "saw firsthand how agentic AI transformed the company" and believes that the combination with Quorum Cyber will provide a platform for Ontinue's next stage.
Judgment
The structure of this case can be written as a complete chain: carve‑out → independent organization → management restructuring → consolidation of three platforms → AI‑native automation layer → additional acquisitions in the AI/data direction → size roughly doubled → sale. It shows that AI transformation and buy‑and‑build need not be mutually exclusive: on one hand, AI unifies internal technology and delivery systems; on the other, acquisitions fill gaps in data, models, and professional services, ultimately delivering an independent platform that is easier for a strategic buyer to acquire.
More noteworthy is that it provides an extra lever in carve‑out scenarios. The spun‑out business usually must first prove it can survive independently, and the tech stack is often the most fragmented and costly part; consolidating it into a single platform simultaneously reduces cost structure and delivery complexity, making the asset easier to present as a product company rather than just a service team when sold. FDEPE records this as a variant of "organizational‑technology lag" in carve‑out scenarios: first spin out the old organization, then re‑compile the tech stack, roles, and delivery model together.
Counter‑evidence
- “Scale roughly doubled” is EQT’s own statement, without disclosing the baseline, absolute values or specific metrics (revenue, ARR or customer count), and it has not been audited.
- EQT does not attribute the growth solely to AI: the doubling stems from a combination of a carve‑out, management restructuring, international GTM, platform merger and three add‑on acquisitions, with agentic AI being only one element, and a disaggregated quantitative contribution is lacking.
- The prices of the three add‑on acquisitions, the integration costs of the platform merger and the one‑time fees have not been disclosed, making it impossible to assess the net contribution of these two actions to the returns.
- The transaction consideration and the financing structure of Quorum Cyber have not been disclosed; the exit outcome may primarily stem from an upward valuation of the cybersecurity segment rather than solely from operational transformation.
- Descriptions of capabilities such as “Agentic SOC” come from official statements by Ontinue and EQT, representing company‑provided narratives, with no third‑party verification observed.
Source: FDEPE tracking database. Original disclosure: EQT Group 2026-09-16 “EQT to sell Ontinue, a provider of AI‑powered Managed Extended Detection & Response cybersecurity services”: eqtgroup.com ↗. The figures in the text are EQT’s and Ontinue’s own statements and have not been audited.