THE LATEST
20 OCT 2026 / VikingCloud + Fiserv expand Cyber Risk Defense partnership · Delivery planned for early 2027

Company / Cybersecurity & compliance

VikingCloud wants
the till to keep ringing.

Cybersecurity gets interesting when the card reader stops working. VikingCloud has built a business around keeping merchants secure, compliant, and open - with payment providers as its route to millions of locations.

Advertisement

A restaurant can have a working grill, a full dining room, and nothing wrong with its food. Then the internet drops. Suddenly the card reader becomes the most interesting object in the building. That small dependency explains much of VikingCloud’s appeal: cybersecurity has to make sense to the person trying to keep a business open.

The useful version
  • Managed security, payment compliance, and connectivity under one roof.
  • Payment providers help deliver protection to small merchants.
  • Asgard puts findings, evidence, and operational status in one place.

VikingCloud operates where payment security meets everyday operations. It serves small merchants through financial partners and works directly with larger organizations, particularly chains with many locations. The company reports protecting more than four million business locations across over 70 countries. Its mission is compact enough to fit on a receipt: “Business Uninterrupted.”

The company behind the card reader

The name sounds like a recent invention. The business underneath it is older. Tom Moynagh established Sysnet in Ireland in 1989. By 2020, Sysnet had attracted growth investment from FTV Capital and True Wind Capital. Acquisitions brought together ControlScan, NuArx, SecureTrust, and the acquired VikingCloud business. In April 2022, the group announced that those businesses would operate as VikingCloud.

This was an assembly job with a commercial logic. Payment compliance brought relationships with processors and merchants. Managed security added people to watch networks. Testing and assessment added specialists who could examine weaknesses and help customers demonstrate compliance. The result spans software, outsourced operations, and professional services.

Building that breadth took capital. Contemporary reporting put the 2020 investment at €150 million. In January 2021, Sysnet raised another $65 million in debt financing, comprising a $10 million revolving facility and a $55 million term loan. Those figures describe financing, rather than the price of a customer’s security package.

The distribution is the interesting part. A payment provider already has a relationship with the merchant. VikingCloud can supply security through that channel, including programs carrying the partner’s brand. It also licenses technology and sells direct services. Commercially, the opportunity is to make protection part of an existing business relationship.

Give the alert somewhere to go

Consider what normally happens after a security tool finds something suspicious. Somebody must decide whether it matters, identify the affected asset, and arrange a fix. If evidence is needed for an assessment, somebody must preserve that too. A finding without an owner can become another unread notification.

Asgard, VikingCloud’s cloud platform, connects those chores. Customers can inspect assets and findings, prioritize risks, schedule penetration testing, track vulnerability scans, and exchange documents with assessors. Its compliance workflows organize evidence and tasks. Its network views show firewall status and logs; its connectivity views include outages and cellular failover.

The services supply the hands behind the interface: managed firewalls, endpoint protection, threat monitoring, detection and response, vulnerability scanning, and penetration testing. PCI specialists handle payment-security assessments and support. Named public customer references include Jula Holding, Axfood, and Rely IT. Restaurants, retailers, hotels, healthcare operators, and payment organizations recur throughout the offering.

That combination places VikingCloud between specialist assessment firms and managed security providers. A buyer might otherwise assemble those capabilities across several suppliers. Its case rests on coordinating them through one service relationship, especially where hundreds of sites need consistent treatment.

An A-to-F grade, delivered through payments

On October 20, 2026, VikingCloud announced an expanded, multiyear agreement with Fiserv. Beginning in early 2027, Fiserv plans to offer Cyber Risk Defense across North America and EMEA. The product combines continuous monitoring and practical guidance with a Security Score using VikingCloud’s patented scoring and Mastercard cyber risk intelligence.

The score runs from A to F. That is a useful design choice for an owner whose main expertise is running a shop. Automatic enrollment and scanning reduce the work needed to begin; merchants who activate tools and take further steps can unlock additional protection. Cyber insurance is included where available, with coverage dependent on the program and actions taken.

VikingCloud CEO Mark Brady in an official executive portrait
The person behind the plain-language pitch. CEO Mark Brady wants owners spending less time translating cybersecurity. Photograph: VikingCloud.

“Business owners shouldn’t have to become cybersecurity experts to protect what they’ve built.”

Mark Brady, CEO · October 2026

For a merchant, the buying questions remain ordinary and essential: what is included, what costs extra, who handles remediation, and what does the insurance cover? Managed-service pricing varies with scope and requirements. A processor’s package needs to be judged on its actual terms, support, and protections.

The weakest store gets a vote

VikingCloud’s September 2026 research supplies a useful complication. Its survey covered cybersecurity and IT decision-makers at large brands with at least 5,000 employees and 500 locations across the United States and Europe. Among respondents whose organizations had been attacked, 77% said the attack spread beyond its starting point.

When attacks spread

Who sets the rules matters.

Reported spread among franchised brands that experienced attacks:

No unified corporate standard
89%
Corporate standard mandated
64%
A 25-point gap, with a caveat. VikingCloud’s 2026 survey reports an association; it does not establish that mandates alone caused the difference.

The first weakness may be organizational. Eighty percent said new locations were not fully integrated into central monitoring and enforcement before or on opening day. More tools cannot settle who must follow the rules. The survey is vendor-sponsored and self-reported, but the operational question it raises is worth asking.

Borrow the discipline

The transferable lesson is practical: connect every location to monitoring before opening, assign an owner to each important finding, and test backup connectivity. Keep assessment evidence where the people doing the work can retrieve it. A business can copy those habits regardless of which supplier it chooses.

VikingCloud fits organizations that want help operating that discipline, especially across many sites or through a payment-provider program. Success still requires access to systems, permission to act, and people who follow through. A dashboard cannot enforce a franchise agreement. At the counter, the final test stays refreshingly simple: can the customer pay, and can the business keep serving?