Gemspring Capital’s TRG acquires Ohio cybersecurity and advisory firm Fentron

Gemspring Capital's portfolio company TRG has acquired Fentron, a Westerville, Ohio cybersecurity and advisory firm. Fentron's services center on CISO advisory, ransomware readiness, vulnerability management and incident response preparedness. The deal was reported on September 30, 2026.

Fentron brings specific advisory and preparedness capabilities that address executive-level security strategy and operational readiness for ransomware and incidents. Those capabilities are commonly in demand among organizations facing increasing regulatory expectations and cyber threats. For TRG, adding a firm that focuses on CISO-level guidance and incident readiness expands its ability to offer both strategic consulting and tactical preparedness to clients.

Fentron's public profile lists four core service areas:

• CISO advisory: high-level security strategy and governance support for chief information security officers and security leadership.
• Ransomware readiness: programs and planning to reduce ransomware risk and improve response posture.
• Vulnerability management: processes to identify, prioritize and remediate technical vulnerabilities.
• Incident response preparedness: planning, testing and exercises to ensure organizations can respond to cybersecurity incidents.

The publicly available report identifies the buyer as TRG, a company backed by Gemspring Capital, and the target as Fentron in Westerville, Ohio. The announcement describes the functional fit but does not disclose financial terms, deal structure, or integration specifics.

What this likely means for clients and stakeholders

• Clients of Fentron can expect continuity of advisory and preparedness services but may see additional resources or offerings as TRG integrates the firm into its broader platform.
• TRG's customers may gain access to more structured CISO advisory and incident-readiness services as part of the combined capabilities.
• Market positioning: The deal signals continued private equity interest in cybersecurity services that combine advisory, preparedness and technical remediation disciplines.

The report does not include deal economics, management or leadership transitions, retention plans for Fentron personnel, or a timeline for integration into TRG's operations. It also does not specify whether Fentron will keep its brand or operate under TRG's name going forward.

This acquisition adds a specialized Ohio-based advisory and incident-readiness firm to TRG's portfolio under Gemspring Capital. Organizations seeking CISO-level advisory, ransomware preparedness and vulnerability management should expect Fentron's services to continue under new ownership, potentially augmented by TRG's broader resources.