Nomios buys Orbcom for first Portuguese base

Nomios, the pan-European cybersecurity services group formerly known as Infradata, has acquired Porto-based Orbcom, a deal that gives it a first presence in Portugal and adds roughly 15 million euros of annual revenue.

The acquisition was announced on 23 September 2026 and completed that month. Financial terms were not disclosed, and Orbcom's management is confirmed to be rolling equity into the enlarged group.

Nomios designs, secures and manages digital infrastructure for organisations across industries. It covers on-premise and cloud environments and sells consulting, professional services and managed services in combination.

Orbcom was founded in 2002 and employs around 80 people across its Porto headquarters and offices in Braga, Lisbon and Lamego. It works in network security, Secure Access Service Edge (SASE), Extended Detection and Response (XDR) and Privileged Access Management (PAM).

Since 2023 Nomios has grown through acquisitions backed by Keensight Capital, its private equity investor. The group assembles country platforms that pair local vendor accreditations with group-scale security operations centre (SOC) and Identity and Access Management (IAM) capabilities.

After taking a majority stake in the Italian cybersecurity company Aditinet, the group reported annual revenue of 400 million euros and more than 600 full-time equivalents across seven European markets.

The Intragen acquisition, announced on 9 October 2025, added an IAM specialist. It came with a 2026 target of 650 million euros in revenue and 75 million euros in earnings before interest, taxes, depreciation and amortisation (EBITDA).

A revenue target on that trajectory leaves little room for greenfield entry, so each new market needs an anchor that arrives with its own revenue and its own vendor standing, which is the profile Orbcom brings to Portugal.

"The acquisition gives Nomios its first base in Portugal and a platform to serve our clients' growing needs." — Sébastien Kher, CEO and Founder, Nomios.

The vendor standing in question is specific. Orbcom holds Diamond Innovator status within the Palo Alto Networks NextWave Partner Program in Portugal, a tier that takes years to accumulate and that a new entrant could not assemble quickly.

Orbcom's closest comparable in Portuguese cybersecurity services runs its own SOC for enterprise clients across the Iberian Peninsula and was itself bought by a French defence and technology group. Large global technology vendors also sell directly into the same market.

No local managed security services (MSS) provider at Orbcom's scale could be identified. The independent mid-sized tier from which a consolidator could build a Portuguese platform was already thin before this deal and is thinner after it.

The segments Orbcom works in are estimated to grow by double digits a year in Portugal. Foreign strategic buyers are also increasing their presence to win contracts tied to evolving cybersecurity regulation.

A scarcity of experienced SOC analysts is meanwhile raising acquisition multiples for mature service providers. That trend favours buyers with the capital to pay for teams that are already built and certified.

For Portuguese enterprise buyers of security services, the field of independent, scale-capable and vendor-accredited local partners is now narrower. Orbcom is no longer available to a rival consolidator, and its Palo Alto tier sits inside a group chasing 650 million euros.

Existing Orbcom customers gain access to the wider SOC, managed services and IAM capabilities of Nomios. The price Keensight Capital's portfolio company paid for that Portuguese foothold remains undisclosed, as it was for both Aditinet and Intragen.