SGS
A Geneva-based certification giant that acquired PCI DSS specialist Panacea Infosec in January 2026.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
SGS, founded in 1878 and based in Geneva (SIX: SGSN), is a globally established testing, inspection, and certification leader. In January 2026 it acquired Panacea Infosec, a 90-plus-person India-based firm specializing in PCI DSS payment security for clients across India, the US, the Middle East, and Africa, to build out a Digital Trust business line.
It gives Panacea’s PCI work the backing of an internationally accredited certification body.
Innovation Matrix Assessment
SGS builds its Digital Trust cybersecurity line through a pattern of specialist acquisitions (Panacea Infosec, and historically Brightsight, Gossamer, Penumbra Security) rather than in-house product development.
Panacea Infosec's 90+ cybersecurity professionals and existing clients across India, the US, Middle East, and Africa are being folded directly into SGS's global digital-trust delivery network.
The January 2026 Panacea Infosec deal, following a multi-year history of Digital Trust acquisitions, reflects sustained, if incremental, strategic investment in cybersecurity certification.
Extending an established certification-body model into PCI DSS payment security consolidates an existing accreditation category rather than disrupting it.
SGS's globally recognized accreditation status and Panacea's PCI DSS specialization give this acquisition a rare degree of independently verifiable assurance credibility.
PCI DSS payment security compliance is a mandatory, recurring requirement across banking, insurance, and e-commerce, making this directly relevant to a large regulated buyer base.
Why CISOs Should Care
For payment-security and compliance teams, SGS's January 2026 acquisition of Panacea Infosec -- a 90+-person India-based firm specializing in PCI DSS payment security across banking, insurance, and telecom clients in India, the US, Middle East, and Africa -- extends SGS's testing, inspection, and certification franchise into digital trust.
What Makes It Different
SGS is applying its globally recognized third-party testing, inspection, and certification (TIC) model to payment and information security, giving Panacea's PCI DSS work the backing of an internationally accredited certification body rather than standing as an independent boutique.
The Matrix Verdict
47/100 — INCUMBENT
A globally established, public TIC leader making a disclosed strategic acquisition to build out a 'Digital Trust' business line -- a credible extension of its accreditation and assurance model into cybersecurity certification.
Editorial Note: Claims vs. Verified Findings
SGS's primary business is testing, inspection, and certification services across many industries, not cybersecurity technology; this profile reflects only its cyber-relevant M&A activity (the January 2026 Panacea Infosec acquisition, part of its Digital Trust segment alongside past deals like Brightsight) and should not be read as a review of SGS's full TIC business.
Sources
Alternatives to SGS
Chainalysis
The dominant, decade-plus incumbent in blockchain analytics, tracing illicit crypto flows and screening sanctions/AML risk for exchanges, banks,…
Vanta
Continuous automated compliance monitoring platform that replaces manual audit evidence-gathering with live, integration-based control checks.
Arcova
Cybersecurity advisory and managed services firm, rebranded from MorganFranklin Cyber, offering GRC, IAM, OT security, and a cloud-based…
DigitalXForce
CISO ReviewedIrving, Texas-based AI-powered platform unifying governance, risk, compliance, and security posture management into one real-time system.
Credo AI
AI governance platform that discovers, assesses, and continuously monitors enterprise AI systems and agents against regulations like the…
Level 6 Cyber
CISO ReviewedContinuous decision-intelligence platform (LISN) that replaces point-in-time security audits with a live digital twin of a CISO's program.