Jonas Software operates as a holding company for industry-specific enterprise software, running a portfolio of 190+ independent software companies across 40+ vertical markets and 30+ countries. The threat surface is broad by design: construction, hospitality, healthcare, fitness, food and beverage, education, legal services, and more - all running their own stacks, their own data pipelines, their own customer-facing systems. Over 60,000 customers depend on these platforms for core business operations. Revenues exceed $5 billion USD.
The structure is decentralized. Acquired companies retain autonomy, culture, and their existing engineering teams. That means no unified security perimeter, no single pane of glass - each subsidiary operates with its own tech stack, its own attack surface, its own compliance obligations. The 'Software for Life' philosophy means Jonas doesn't flip acquisitions; it holds them. The long-term ownership model changes the calculus on security investment, technical debt, and incident response planning across the portfolio.
Founded in 1990 and publicly traded, the company has completed 185+ acquisitions and employs over 8,000 people globally. For security practitioners, the challenge isn't a single product - it's governing risk and enforcing baseline posture across a sprawling, heterogeneous ecosystem of enterprise management software serving critical industries with high regulatory stakes. Healthcare data, construction project management, legal records, hospitality payment systems: the domains are concrete, the data is sensitive, and the architectural complexity is real.
