Infosys Strengthens Global Cyber Defenses by Acquiring The Missing Link
Deal at a glance
- Infosys has completed its purchase of Australian security services firm The Missing Link for A$98 million in cash.
- The deal adds red and blue teams plus a Global Security Operations Centre to Infosys’ network of cyber defense centers.
- Infosys announced the agreement on April 17, 2025, and closed it on May 2.
- The Missing Link, founded in 1997 and based in Sydney, has more than 200 staff.
- It will be paired with Infosys Cobalt, the company’s cloud services brand.
Infosys has bought its way into a bigger security practice in Australia. The Indian IT services company said on May 2, 2025, that it had completed the acquisition of The Missing Link, two weeks after announcing the deal. Clients increasingly want one provider for cloud and security work, and IT services firms are buying specialists to keep up.
What Infosys bought
Infosys paid A$98 million (about ₹532 crore) in an all-cash deal made through its subsidiary Infosys Singapore Pte Ltd. The Missing Link was set up in 1997 by CEO Alex Gambotto. It works in cybersecurity as well as cloud and automation, with offices in Sydney and Melbourne plus a branch in the UK.
The firm sells strategic advice and both offensive and defensive security testing. It also does risk and compliance work and runs managed services. Infosys said it brings its own tools too.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
What changes for clients
Red team, blue team, SOC
The Missing Link’s security operations centre joins Infosys’ global cyber defense centers. Its red team runs attack simulations. Its blue team handles detection and response. Infosys said combining these teams with Infosys Cobalt lets it sell end-to-end security alongside cloud projects.
Why Infosys made the deal
Large clients now buy cloud migration and security together. Infosys competes with Accenture and TCS, among others, for that work, and buying an established local team is a lot faster than hiring one person at a time. Infosys chief delivery officer Satish HC said the combination of Infosys Cobalt’s cloud work with The Missing Link’s security expertise would let the company sell end-to-end security.
A bigger footprint in Australia
Infosys called Australia a fast-growing market and said the deal strengthens its security and cloud work across Australia and Asia. That gives it a stronger Asia-Pacific base. The Missing Link’s existing clients come with it. Its staff know the local rules.
What The Missing Link adds
For Infosys, the deal adds penetration testing and incident response. It also adds managed security run by a team that clients already know. The Missing Link will keep operating under its own name for now.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
An earlier version of this article cited unnamed industry analysts. We could not find those comments and have removed the reference.
What to watch
The deal is small next to Infosys’ total revenue. Its value lies in people and client relationships, and in whether Infosys can keep The Missing Link’s staff and grow the practice beyond Australia.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.