Infosys Expands Horizons with Strategic Consulting and Cybersecurity Acquisitions
At a glance:
- Infosys is buying an energy consulting firm and an Australian cybersecurity company.
- Both deals add specialist skills that clients are asking for.
- The two targets are MRE Consulting in Houston and The Missing Link in Australia.
- Infosys says the deals will give its global clients more consulting and security depth.
Two April 2025 deals
Infosys, the Indian IT services group, announced two acquisitions in April 2025. One adds energy-industry consulting. The other adds cybersecurity services, and together they extend Infosys into areas where its largest clients, from oil traders to banks and hospitals, have been asking for more specialist help than a general IT contractor usually offers.
Clients face complicated data systems and tougher security demands. Infosys is buying expertise. It is a common strategy for large IT services firms that need skills faster than they can hire and train for them.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
MRE Consulting
The consulting deal is for MRE Consulting, a Houston-based firm that advises energy and commodity companies on trading and risk management systems. Infosys agreed to pay about $36 million and completed the deal on April 30, 2025.
MRE’s specialists know the trading and risk platforms that energy companies run. That is a niche. It gives Infosys a stronger pitch to utilities and commodity traders.
The Missing Link
The security deal is for The Missing Link, an Australian cybersecurity services provider. It runs offensive and defensive security work and a security operations center. Infosys completed that acquisition on May 2, 2025.
The Missing Link gives Infosys more security staff and clients in Australia, a market where it was already growing and where demand for security work has climbed after a string of large breaches at telecom, health insurance and retail companies. It is a good fit.
How the deals fit Infosys’s strategy
Both deals follow the same playbook. Infosys buys a small, specialized firm. It keeps the people and offers their skills to its much larger client base in sectors such as energy, financial services and healthcare, combining MRE’s consulting and The Missing Link’s security services with its own technology work.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Industry Perspectives
Analysts tend to see acquisitions like these as a way for IT services firms to stay relevant as clients shift spending toward digital transformation and security. The two deals are small. They add depth where clients are spending.
What clients should expect
For Infosys clients, the practical effect is access to more specialists in energy trading systems and in security, offered through the same supplier.
Infosys will need to keep the acquired teams intact and integrate them without losing what made them valuable. If it does, the deals will strengthen its position in consulting and security at a time when large clients are trimming their supplier lists.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.