Cybersecurity Buyout Acquisitions in 2026

Arctic Wolf has acquired Sevco Security, a Visionary-ranked exposure assessment platform, to integrate Sevco’s asset intelligence and exposure assessment capabilities into the Arctic Wolf Aurora Platform. The acquisition expands Arctic Wolf’s proactive security and exposure management capabilities for customers and MSPs by unifying asset intelligence, vulnerability context, and security control coverage.

Palo Alto Networks has completed its acquisition of CyberArk, integrating CyberArk's identity security platform into Palo Alto's broader security ecosystem. Under the deal, CyberArk shareholders will receive $45 in cash and 2.2005 shares of Palo Alto Networks common stock per CyberArk share; the acquisition is intended to make identity security a core pillar across human, machine, and AI/agent identities.

ITC Secure and IronNet have combined to form Collective Defence, a Luxembourg-headquartered cybersecurity company focused on protecting critical infrastructure from state-sponsored and hybrid threats. The new company brings together ITC Secure's managed security and advisory capabilities with IronNet's collective defence and network detection technology, and will leverage a strategic partnership with Microsoft to embed AI across its security operations.

Endor Labs, the AI-native application security platform, has acquired Autonomous Plane, a cloud-native application security startup founded by Kyle Quest, to add full‑stack reachability from source code through container images. The deal expands Endor Labs' platform capabilities for container reachability analysis, improving vulnerability prioritization and reducing false positives for enterprise and regulated customers.

Proofpoint, Inc. has acquired Acuvity, an AI security and governance platform provider, to enhance its capabilities for securing AI agents, copilots, and model-connected applications across the enterprise. The acquisition adds AI-native visibility, governance and runtime protection to Proofpoint’s human- and agent-centric cybersecurity platform, enabling broader protection of people, data and AI-driven workflows.

Logicalis US has acquired Maple Woods Enterprises to integrate its Overwatch cybersecurity and compliance capabilities into Logicalis’ managed security services. Maple Woods’ founder Rob Edwards will join Logicalis US as Vice President, Security and Innovation as the combined team expands Overwatch into additional verticals including healthcare and SLED while preserving its defense-grade compliance rigor.

Woven Solutions, a Reston, Virginia-based provider of AI-enabled mission software for national security customers, has acquired Apira Technologies, a developer of AI, computer vision and synthetic media detection tools used in sensitive cyber and information operations. The deal expands Woven’s cyber and information operations capabilities, adds engineering and R&D talent, and increases access to end customers and prime contracts; it is Woven’s second acquisition since receiving a strategic investment from Falfurrias Management Partners in August 2025.

Semperis, the identity-driven cyber resilience and crisis management company, has acquired MightyID, an identity resilience specialist for cloud identity providers Okta and Ping. The acquisition expands Semperis' platform to provide backup, restore, migration, failover and faster recovery across hybrid and multi-cloud identity environments.

CyberMaxx, a Linthicum Heights, Maryland–based managed detection and response provider, has acquired Corvid Cyberdefense, a Mooresville, North Carolina–based email security services provider. The acquisition adds Corvid’s managed email security and Elastic SIEM capabilities, more than 130 customers, and strengthens CyberMaxx’s channel-focused, tech-enabled security offering.

Mitsubishi Electric Corporation completed its acquisition of all outstanding shares of Nozomi Networks Inc., making Nozomi a wholly owned subsidiary effective January 28, 2026. Nozomi Networks will operate as an independent subsidiary out of San Francisco and continue delivering vendor-agnostic OT/IoT cybersecurity solutions; the company reported over $100M in 2025 revenue and ~336 employees as of December 2025.

Radware Ltd. (NASDAQ: RDWR) has completed the acquisition of Pynt, an API security testing company, to add pre-production API security testing to its API security portfolio. The deal brings Pynt's founders and key employees into Radware and extends Radware's capability to deliver continuous, full-lifecycle API security from development through production.

FGS Global launched a new AI Advisory practice and acquired Memetica, a specialist threat intelligence consultancy founded in 2019 by Ben Decker. The purchase integrates Memetica’s AI-driven threat detection and dark‑web monitoring capabilities into FGS’s global AI and Innovation group to strengthen early‑warning, tipping‑point analysis and reputational defense offerings.

Sole Source Capital LLC has acquired Brite, a cybersecurity and managed IT services provider headquartered in Victor, New York, marking Sole Source's first platform investment from SSC Partners Fund III. The deal positions Brite as a buy-and-build platform to pursue consolidation in the fragmented cybersecurity managed services market; financial terms were not disclosed and Brite's existing management team will remain in place.

Ping Identity has completed its acquisition of Keyless, integrating Keyless' zero-knowledge biometric authentication technology into Ping's identity platform to strengthen defenses against AI-driven identity attacks and enable device-independent, privacy-preserving biometric verification. The acquisition expands Ping's capabilities for customer, workforce and B2B identity use cases; financial terms were not disclosed.

London-headquartered Axiom GRC has acquired AssurancePoint, an Atlanta-based SOC and ISO audit and advisory firm, to strengthen its North American cyber compliance and assurance capabilities. AssurancePoint will integrate with Axiom's U.S. platform IS Partners to expand audit capacity, scale recurring audit delivery, and deepen the company's U.S. delivery footprint.