Tracked deals
164
164 tracked deals across 2026.
Tracked deals
164
164 tracked deals across 2026.
Buyer mix
Strategic-led
144 strategic · 22 pe
Top trend
Volume peaked in 2026
164 tracked deals announced in 2026.
Buyer Snapshot
Illustrative buyers pulled from tracked transactions on this page. This table is capped and intentionally non-exhaustive.
| Buyer | # Deals | Focus | Type |
|---|---|---|---|
| Palo Alto Networks | 4 | Enterprise cybersecurity company building network, cloud,... | Strategic |
| Cisco | 3 | Enterprise networking and security company expanding AI a... | Strategic |
| Infoblox | 3 | Hybrid/multi-cloud networking and preemptive DNS-based se... | Strategic |
| Acron Technologies | 2 | Defense technology portfolio company focused on Aerospace... | Strategic (PE-backed) |
| Booz Allen Hamilton | 2 | Advanced technology company providing commercial-grade pr... | Strategic |
| Cycurion, Inc. | 2 | AI-driven cybersecurity and national security solutions p... | Strategic |
| Cyera | 2 | AI security platform providing visibility and controls to... | Strategic |
| TJC, L.P. | 2 | Private investment firm that backs defense technology bus... | PE |
| 1Password | 1 | Identity security platform provider focused on unified cr... | Strategic |
| 908 Devices Inc. | 1 | Purpose-built handheld chemical analysis devices for real... | Strategic |
Last 10 years
Supporting Data
S&P Global has agreed to acquire OpenZeppelin, a blockchain and smart contract security company. The deal is intended to expand S&P Global’s risk-assessment capabilities into the technology layer underlying onchain financial markets, while OpenZeppelin will continue operating as a standalone business unit.
Quorum Cyber signed a definitive agreement to acquire Ontinue, a managed extended detection and response (MXDR) provider with an Agentic SOC. The proposed combination is intended to expand Quorum Cyber’s Microsoft-first, AI-enabled cyber resilience and 24/7 threat detection capabilities and extend reach across North America, the UK, and the DACH region. Financial terms were not disclosed, and closing is expected after customary conditions and approvals.
Surfshark, a cybersecurity and digital privacy company, has completed the acquisition of the majority stake of Optery, a US-based data removal provider. Optery will continue operating as a standalone company, integrating its data-broker and people-search deletion technology into Surfshark’s privacy ecosystem.
Everbridge acquired Open Measures to expand its open-source risk intelligence capabilities. The deal adds technology that collects and analyzes billions of publicly available signals across more than 45 digital sources to help organizations detect emerging threats earlier and connect digital signals to people, locations, assets, and operations.
Iris Powered by Generali completed a management-led buyout from Redion Group and transitioned to operate as an independent identity and cyber protection company under the new brand Iris OnWatch. The company will continue delivering its identity and cyber protection services to millions of individuals via enterprise and financial institution clients, supported by growth investors NewSpring Capital and Signal Cove Capital.
Palo Alto Networks acquired Console, an AI-native platform for building agentic workflows across enterprise operations. Palo Alto Networks plans to integrate Console’s technology with its Cortex security platform to expand AI-powered investigation, prioritization, and automated alerting/remediation. Financial terms were not disclosed.
NetSPI and Synack have entered into a definitive agreement to merge and create a combined offensive cybersecurity platform with more than $200 million in revenue. The merged company pairs NetSPI’s penetration testing capabilities with Synack’s continuous security validation platform and network of vetted security researchers, accelerating security testing with AI while retaining human expertise.
A-LIGN, a cybersecurity compliance provider, announced its acquisition of Pathfynder, a specialized offensive and defensive cybersecurity firm. The deal expands A-LIGN’s service offerings to include advanced penetration testing, red teaming, adversary emulation, forensics, and incident response for enterprise customers with complex security needs.
Socure announced a strategic growth investment valuing the company at $5.2 billion, led by Summit Partners with participation from investors including Goldman Sachs Alternatives and Wells Fargo. In parallel, Socure acquired Fravity, integrating Fravity’s first-party agent building capabilities into Socure’s RiskOS platform as RiskOS_Agents.
Brinqa acquired PlexTrac, adding offensive security validation, remediation workflow, and reporting capabilities to Brinqa’s unified exposure management platform. The combination is positioned to close the “Continuous Threat Exposure Management (CTEM) loop” by providing proof that remediation fixes actually worked and remained effective. Financial terms were not disclosed, and PlexTrac’s products will continue to operate as standalone offerings.
SCP Standard Capital Partners AG agreed to acquire all shares in Vanea Technologies GmbH and Nocturne Technologies GmbH. Vanea develops defense solutions for autonomous warfare, while Nocturne (Nocturne Defence), based in Osnabrück, focuses on civil and military counter-UAS (drone defense) systems.
CesiumAstro Inc., a space communications and ISR systems company, announced the acquisition of Jariet Technologies, a fabless mmWave RF System-on-Chip semiconductor company focused on SATCOM, electronic warfare, and radar. The deal is intended to bring semiconductor design in-house to increase control over the RF signal chain and accelerate development of next-generation phased array satellite solutions.
NetApp acquired JetStream Software, a provider of VMware disaster recovery and migration technology. The deal is intended to expand NetApp’s cyber resilience, data protection, and cloud migration capabilities, enabling customers to start with disaster recovery in cloud environments and evolve toward production migration over time.
Privacy Bee has acquired EraseMe.app, a personal data removal service, bringing its customers and privacy technology into Privacy Bee’s platform. The deal is intended to expand Privacy Bee’s continuously identifying and removing exposed consumer information capabilities, and financial terms were not disclosed.
AXA XL, which currently owns about 49% of S-RM, has agreed to acquire the remaining shares of the company. S-RM is a global consultancy specializing in corporate intelligence and cybersecurity, and is expected to continue delivering services as part of AXA XL Risk Advisory after closing.
Infoblox completed its acquisition of Kentik, combining Infoblox’s authoritative critical network services and asset visibility with Kentik’s real-time network intelligence and observability. The deal is intended to strengthen the trusted data foundation for AI-driven networking, security, and operations across hybrid and multi-cloud environments.
Visa has entered into an agreement to acquire BioCatch for $2.4 billion in cash. The deal will combine BioCatch’s behavioral and device intelligence (AI/ML signals) with Visa’s existing cybersecurity, fraud prevention, risk, and payment security offerings to stop account takeovers and financial scams earlier in the customer journey.
Wind Point Partners has acquired Eze Castle Integration (ECI), a global managed services provider focused on cybersecurity and other enterprise technology services for regulated industries. H.I.G. Capital completed the sale of its portfolio company ECI to Wind Point as part of ECI’s transition into a modern, security-first managed services platform.
Cycurion, Inc. has closed its acquisition of substantially all assets of Kustom Entertainment, Inc.'s legacy video solutions segment, including the Digital Ally-branded portfolio. The deal adds more than $5 million in expected annual revenue and over $1.2 million in EBITDA, along with access to 800+ public safety customers and a patent portfolio of 50+ patents to strengthen Cycurion’s AI-driven cybersecurity and video/evidence platforms.
Geospatial intelligence and AI counter-drone company Space-Eyes has entered into a definitive business combination agreement to go public through a merger with SPAC McKinley Acquisition Corp in a deal valuing the combined business at $638 million. The transaction is expected to close in the fourth quarter of 2026, subject to regulatory and shareholder approvals, and will list the combined company on Nasdaq under ticker CUAS.
Bank of America announced plans to acquire information security consultancy MDSec Consulting Limited ("MDSec"). The transaction is expected to close in the fourth quarter of 2026, subject to receipt of regulatory approvals.
Okta has signed a definitive agreement to acquire Permiso Security, a cloud-native identity security platform for detecting and mitigating threats across human, non-human, and agentic identities in multi-cloud environments. The deal is expected to close in the third quarter of Okta’s fiscal year 2027 and will expand Okta’s capabilities into identity threat detection and response within Security Operations, including AI agent behavior visibility.
Cyera has signed a letter of intent to acquire Oasis Security, combining data security with non-human identity and agentic access management to create a unified platform for securing AI agents in enterprise environments. The proposed transaction is still moving through the completion process, and Oasis will continue operating during the transition.
SwiftConnect announced it is acquiring HID’s Workforce Business Unit, including HID SAFE, a platform that automates identity lifecycle governance for physical access. The combined solution is meant to unify access-control experiences with governance so permissions update automatically as HR, IT, and security changes occur.
Ideagen, a provider of software for regulated industries, announced it has acquired Work Wallet, a UK-based developer of mobile-first environmental, health, and safety (EHS) software. The deal expands Ideagen’s EHS capabilities across EMEA and the Americas, with Work Wallet launching immediately in the Americas as part of Ideagen’s EHS suite (while remaining branded in the UK for a period).
Keyfactor announced its intent to acquire UK-based Cofide, an identity platform that secures software workloads and AI agents across cloud environments. The deal is designed to extend Keyfactor’s Trust Control Plane to cover non-human identities, enabling security teams to manage and govern workload and agent identity at scale.
Carlyle acquired Secturion Systems, a provider of high-speed, NSA-certified hardware encryption solutions based in Centerville, Utah. The transaction represents the first investment by Carlyle’s dedicated middle-market Aerospace, Defense & Government and Industrials platform.
Genki, an international health insurer for digital nomads and expatriates, acquired Cologne-based insurtech startup Wave Claims and its Claim OS software. The deal is intended to bring specialized AI-driven insurance claims and expertise in-house, automating document-intensive claims processing and helping improve submission, fraud detection, and product development.
NINJIO announced its acquisition of SafeStack, a developer security and application security training platform that powers NINJIO Secure Code. The deal expands NINJIO’s human risk management offering beyond employee awareness and phishing simulations into the software development lifecycle, enabling integrated workforce and developer secure coding education.
FalconX acquired bloXroute, a blockchain networking and trading connectivity infrastructure provider, to strengthen FalconX’s onchain capital markets platform. The deal combines bloXroute’s low-latency blockchain networking layer with FalconX’s institutional trading and prime brokerage capabilities to improve onchain execution speed and efficiency for tokenized assets.
Verdane agreed to acquire majority ownership stakes in four technology businesses from Trifork Labs, the R&D/venture arm of Trifork Group. The portfolio includes Axoniq, Dawn Health, Frameo, and XCI, with Verdane acquiring 52% of the combined book value for a total cash consideration of EUR 22.8 million plus earnout payments.
Cribl, the AI platform for telemetry, announced it is acquiring CardinalOps, an agentic detection engineering company. The deal expands Cribl’s AI Platform for Telemetry into security operations by adding detection engineering capabilities that help SOC teams improve threat coverage, validate detections, and reduce data/alert costs while offering a more flexible path away from legacy SIEM architectures.
Barracuda Networks has acquired Evo Security, an identity and access management (IAM) provider built specifically for managed service providers (MSPs). The deal aims to embed Evo Security’s IAM and privileged access management capabilities into Barracuda’s BarracudaONE platform to create a unified, end-to-end identity resilience stack for MSPs.
CyberNut, a cybersecurity awareness platform built exclusively for K-12 school districts, acquired the Neptune Navigate digital citizenship curriculum/platform. The deal expands CyberNut’s offering by adding a student-focused, purpose-built curriculum that complements its staff phishing simulations, security awareness training, and threat reporting. Financial terms were not disclosed.
Redwood AI Corp. entered into a share purchase agreement to acquire Quantum.IQ Technologies Inc., acquiring all issued and outstanding shares. The deal is designed to expand Redwood’s AI and computational technology platform into quantum-resistant cybersecurity, cryptographic intelligence, and enterprise security infrastructure modernization.
Volaris Group acquired SureView Systems, a Tampa-based provider of enterprise security monitoring, analysis, and response across physical and cyber domains. SureView’s “single pane of glass” platform ingests security data such as video and access control to support mission-critical security operations, and it will continue operating independently within Volaris’ Security Portfolio.
Incode Technologies has completed its acquisition of Identiq, a provider of privacy-enhancing cryptographic technology for peer-to-peer anti-fraud collaboration. The deal expands Incode’s privacy-by-design identity verification platform with Identiq’s patented ability to share fraud signals without exposing sensitive customer data.
onsemi and Synaptics announced they entered into a definitive agreement for onsemi to acquire Synaptics in an all-stock deal valued at approximately $7 billion. Synaptics stockholders will receive 1.350 shares of onsemi common stock for each Synaptics share, and Synaptics stockholders are expected to own about 12% of the combined company on a fully diluted basis.
Booz Allen Hamilton completed its $720 million acquisition of Ultra I&C Mission Solutions (Ultra Mission Solutions) from Cobham Ultra Group, an Advent portfolio company. The deal expands Booz Allen’s defense technology platform with Ultra’s mission-critical software, encryption, and edge-compute capabilities, which will be integrated into Booz Allen’s defense technology business.
Accenture has entered into agreements to acquire a majority stake in OT cybersecurity company Dragos and 100% of runZero and NetRise. The combined transactions are valued at approximately $4.175 billion and are expected to close in August or September 2026, pending regulatory approvals. The acquisitions are intended to expand Accenture’s OT cybersecurity position from services into software and create a unified xOT security platform combining threat detection, exposure assessment, and firmware/software supply-chain visibility.
Cisco announced its intent to acquire WideField Security, a security technology company focused on protecting identities in the agentic AI era. WideField’s technology is expected to be integrated into Splunk to enhance Agentic SOC capabilities by normalizing and correlating identity, session, and activity telemetry from multiple sources.
EigenQ and Silicon Valley Acquisition Corp. (SVAQ) entered into a definitive business combination agreement to take EigenQ public in a transaction valued at approximately $3 billion pro forma enterprise value. The combined company is expected to trade on Nasdaq under the ticker symbol EIGQ, with a planned close in the fourth quarter of 2026, subject to shareholder approval and SEC review.
CertifID, a platform for real estate wire fraud prevention, announced it has acquired CloseSimple, a closing communication and automation platform used by hundreds of U.S. title companies. The combined offering is intended to deepen integrations with title production systems, accelerate AI use in closing workflows, and provide stronger fraud protection alongside modern closing automation.
Quest Software, backed by Clearlake Capital Group, acquired Anetac, an AI-powered identity security provider focused on human, non-human, and agentic identities. The deal is intended to strengthen Quest’s identity security platform—especially in Microsoft ecosystems—by adding continuous visibility into identity access, privilege behavior, and access chains.
A10 Networks announced it is acquiring TrojAI, an AI security company focused on securing, testing, and governing AI applications and agentic workflows. A10 plans to integrate TrojAI’s software-based red teaming and runtime protection with its hardware-based AI firewall offerings to help organizations protect AI models, data, and agents across on-premises, cloud, and hybrid environments.
1Password announced that it has acquired Apono, a provider of just-in-time access governance technology for humans, machines, and AI agents. The acquisition extends 1Password’s Unified Access platform to govern what identities can do at runtime—granting access when needed, scoping it to tasks, monitoring actions, and automatically revoking privileges when work is complete.
SailPoint announced it has completed the acquisition of Entro Security, a Tel Aviv-based provider of non-human identity (NHI) and credential security technology. The deal is intended to strengthen SailPoint’s Agentic Fabric by enabling discovery, governance, and protection of machine identities and autonomous AI agents, including secrets and tokens found in developer and cloud environments.
Draganfly has completed its previously announced acquisition of Skip Dynamix for total consideration of up to $7.525 million. The deal adds Skip Dynamix’s Orca long-range, hand-launchable fixed-wing drone platform to Draganfly’s existing multi-rotor lineup and expands the combined company’s defense and government opportunities.
Rubrik introduced two new Identity Resilience capabilities—Identity Continuity and Identity Roll Forward. Identity Continuity is powered by Rubrik’s acquisition of Strata.io, while Identity Roll Forward was developed in-house by Rubrik; terms were not disclosed and both capabilities are available in private preview.
Woven Solutions announced its acquisition of Insignis, a provider of systems engineering and software development solutions supporting critical cyber operations. The deal expands Woven’s engineering resources and broadens its technical capabilities for mission-critical national security customers. Financial terms were not disclosed.
Full Export
Get the full acquisitions list for this page as CSV + XLSX.
Find buyers actively acquiring cybersecurity companies.