Pistachio, an Oslo startup that fights phishing through automated security training, has acquired Hugin.io to move into compliance management. The deal is an intellectual-property acquisition, and financial terms were not disclosed.
Pistachio builds what it calls human risk management for small and mid-sized businesses, personalizing awareness training and phishing simulations instead of forcing staff through annual generic courses. Founded in 2023, it focuses on the people side of breaches, since compromised accounts and careless insiders are the most common entry point for attacks.
Hugin.io, also Norwegian, helps growing companies assess, manage and demonstrate their cybersecurity posture and regulatory compliance. Pulling that technology in-house lets Pistachio broaden from reducing risk to proving it has been managed, a growing requirement as customers and regulators demand evidence of security programs.
Chief executive Joe Jones, who co-founded Pistachio, said effective security should not demand constant effort from stretched teams, and bringing in Hugin’s technology is a natural next step toward compliance and posture management.
The acquisition is part of a wave of consolidation among Nordic security startups as they chase the same small-business buyers that enterprise vendors have largely ignored.
