According to Reuters, private equity firm Thoma Bravo is exploring a sale of Imprivata, a digital identity software provider focused on the healthcare industry. The firm is working with JPMorgan and Evercore on the process, which is in its early stages. One source suggests the sale could value Imprivata at up to $7 billion, or even more. Thoma Bravo originally took the company private back in 2016 for just $544 million. Today, Imprivata generates roughly $500 million in annual revenue and has grown rapidly through add-on acquisitions. The company’s software lets healthcare workers securely access clinical systems and sensitive patient data.
The Private Equity Playbook
This is a classic Thoma Bravo move, and it’s a stunning example of the private equity playbook when it works. They bought Imprivata eight years ago for half a billion. Now they’re looking at a potential exit worth over ten times that. How? Well, the report says they’ve grown it through “add-on acquisitions,” which is PE-speak for buying smaller companies and bolting them onto the main platform. They’ve also ridden a massive wave. Healthcare digitization was already accelerating, and then the pandemic basically put it on rocket fuel. Needing secure, fast access to patient data across different systems isn’t a nice-to-have anymore; it’s absolutely critical. Imprivata was sitting right in that sweet spot.
Why A Sale, And Why Now?
So why sell? A $7 billion price tag on $500 million in revenue implies a multiple around 14x. That’s high, but not insane for a high-growth cybersecurity player in a hot sector. Reuters points out CyberArk got over 17x forward revenue in its sale to Palo Alto Networks last year. The market for premium cybersecurity assets is still frothy. For Thoma Bravo, this is probably just the right time to cash in a massive chip. They’ve built it up, the growth story is strong, and valuations are favorable. It’s also getting harder to find those next big “add-on” acquisitions without overpaying. Selling to another PE firm who thinks they can squeeze out more growth, or to a strategic buyer like a larger tech or healthcare IT company, makes perfect sense.
The Broader Cybersecurity M&A Frenzy
Here’s the thing: this isn’t just about one company. This potential deal is a direct symptom of the ongoing frenzy in cybersecurity M&A. The Reuters piece nails the catalyst: AI. Everyone’s rushing to adopt AI, but that’s amplifying every single data protection and privacy fear out there. Companies aren’t just buying tools; they’re buying entire platforms that can ensure compliance and lock down sensitive data. For big tech or private equity, acquiring a proven, revenue-generating leader in a niche like healthcare identity is a safer bet than building from scratch. It’s a trend that shows no sign of slowing down. I think we’ll see more of these “platform” sales from PE firms who’ve been quietly building in the security space for the last 5-7 years.
Who Might Buy It?
The report says interest is expected from both corporations and other private equity firms. On the corporate side, think about big healthcare IT players like Epic or Cerner (now part of Oracle), or broader identity and access management giants looking to deepen their healthcare vertical expertise. A company like Okta might look at it, though that’s a big bite. Private equity is almost a certainty to be in the mix—firms are sitting on huge piles of dry powder and need to deploy it. A $7 billion price tag means club deals or the very largest funds. Basically, this won’t be a quiet auction. It’ll be a heavyweight fight, and the winner gets a crown jewel in healthcare cybersecurity. For more on the industrial technology behind secure systems, authoritative sources like Reuters provide crucial context.
