Recent Cybersecurity Acquisitions
Acquisition Volume in Cybersecurity by Year
Last 5 years
This page covers M&A activity in the Cybersecurity sector from 2003 through 2026, with transactions involving strategic vendors, managed security providers, and financial sponsors. Recent deals span the United States and Luxembourg and include both platform builds and targeted technology tuck‑ins.
Recurring themes include identity and access security, AI‑native security and governance, expansion of managed detection and response services, and defense/federal cyber capabilities. Notable examples in the most recent events include Palo Alto Networks acquiring CyberArk, Proofpoint acquiring Acuvity, and Arctic Wolf acquiring Sevco Security.
What Stands Out
- Identity and access security is prominent: transactions such as Palo Alto Networks / CyberArk and Semperis / MightyID emphasize identity as a core platform component.
- AI‑native and agent/security governance plays are emerging: Proofpoint acquired Acuvity and other buyers are adding AI visibility, governance, and runtime protection.
- Managed services and MSSP consolidation continue: examples include LevelBlue acquiring Alert Logic’s managed services business, CyberMaxx acquiring Corvid Cyberdefense, and regional MSP platform deals like Entech / C2 Computer Services.
- Defense, national security, and federal capabilities are active targets: Markon acquired Millennium Corporation, and Woven Solutions added AI and synthetic‑media detection via Apira Technologies.
- Geographic focus is largely U.S.‑centric with recent activity in Texas, Virginia, Massachusetts, California, Ohio and Florida, plus cross‑border activity such as the Luxembourg combination forming Collective Defence.
-
March 19, 2026
- Buyer
- Sterling Investment Partners
- Target
- Cyber Advisors
- Industry
- Cybersecurity
- Location
- Minnesota, United States
- Type
- Buyout
Sterling Investment Partners announced the acquisition of Cyber Advisors, a provider of cybersecurity and managed IT services. Cyber Advisors, headquartered in Maple Grove, Minnesota, supports 1,800+ customers nationwide with 330+ professionals.
-
March 13, 2026
- Buyer
- OpenAI
- Target
- Promptfoo
- Industry
- Cybersecurity
- Location
- United States
- Type
- Buyout
OpenAI announced it plans to acquire Promptfoo, an AI security platform that tests, evaluates, and secures AI systems during development. Promptfoo’s capabilities will be integrated into OpenAI Frontier to strengthen enterprise agent testing with reporting, traceability, and governance features.
-
March 11, 2026
- Buyer
- Google LLC
- Target
- Wiz, Inc.
- Industry
- Cybersecurity
- Location
- New York, United States
- Type
- Buyout
Google has completed its all-cash acquisition of Wiz, a New York-headquartered cloud and AI security platform, for $32 billion (subject to closing adjustments). Wiz will join Google Cloud, while maintaining its brand and a multicloud approach to securing customers across major cloud environments.
-
- Buyer
- OneSpan Inc.
- Target
- Build38
- Industry
- Cybersecurity
- Location
- Germany
- Type
- Buyout
OneSpan has acquired Build38, a next-generation mobile application protection provider, to expand OneSpan’s SDK-based mobile security capabilities. The deal is designed to strengthen OneSpan’s App Shielding offering by combining Build38’s in-app Runtime Application Self-Protection (RASP) approach with cloud-delivered threat intelligence and AI-driven defenses. OneSpan says the integrated solution will provide deeper in-app protection, better device-level telemetry, and improved visibility and response to evolving mobile-channel attacks for banks and enterprises.
-
- Buyer
- ASSA ABLOY
- Target
- Sennco Solutions
- Industry
- Cybersecurity
- Location
- Illinois, United States
- Type
- Buyout
ASSA ABLOY has acquired Sennco Solutions, a US provider of asset protection technology and retail security solutions focused primarily on the health and beauty retail segment. The acquisition strengthens ASSA ABLOY’s Retail business area within its Global Solutions division with complementary anti-theft capabilities and is expected to be accretive to EPS from the outset.
-
March 2, 2026
- Buyer
- Digital Investment Strategy (DIS)
- Target
- Slam Sponsor, LLC, Slam Corp.
- Industry
- Cybersecurity
- Location
- United States
- Type
- Buyout
Digital Investment Strategy (DIS) acquired 100% of the issued and outstanding equity interests of Slam Sponsor, LLC, the sponsor of Slam Corp. Slam Corp. will change its name to Field Digital Corp. and aims to transition into an integrated operating platform for institutional digital-asset infrastructure.
-
March 2, 2026
- Buyer
- Cellebrite
- Target
- SCG Canada, Inc.
- Industry
- Cybersecurity
- Location
- Canada
- Type
- Buyout
Cellebrite (NASDAQ: CLBT) has completed its acquisition of SCG Canada, Inc., a drone-forensics provider whose solutions help extract, decode, and visualize data from more than 80 common UAVs. Cellebrite said the add-on expands its AI-powered digital investigation platform with a new data source for defense, intelligence, and public safety investigations. Financial terms were not disclosed.
-
February 27, 2026
- Buyer
- Giesecke+Devrient (G+D), Veridos
- Target
- XTec Incorporated
- Industry
- Cybersecurity
- Location
- Florida, United States
- Type
- Buyout
Giesecke+Devrient (G+D) acquired XTec Incorporated, a Miami-based provider of secure authentication and identity management solutions for U.S. federal and highly regulated environments. The deal closed on February 27 and expands G+D’s digital identity and public-sector security footprint in North America, with XTec integrated into Veridos, the G+D/Bundesdruckerei joint venture.
-
February 26, 2026
- Buyer
- Terminus Capital Partners (TCP)
- Target
- Eventus
- Industry
- Cybersecurity
- Location
- Texas, United States
- Type
- Buyout
Terminus Capital Partners (TCP) has made a majority investment in Eventus, a trade surveillance and financial risk solutions provider. The deal terms were not disclosed, and TCP’s ownership is intended to accelerate Eventus’ global expansion and product innovation, including continued platform capability development and selective acquisitions.
-
February 26, 2026
- Buyer
- Finovifi
- Target
- Turner Software Technologies, Inc.
- Industry
- Cybersecurity
- Location
- Alabama, United States
- Type
- Buyout
Finovifi, a provider of AI-driven fraud prevention and compliance technology for community financial institutions, announced the acquisition of Turner Software Technologies, developer of the Teller21 teller automation platform. The deal brings more than 50 community bank clients into Finovifi’s ecosystem and enables Finovifi to embed its FraudSentry check-fraud detection engine directly into teller workflows via a new product called FrontLine Sentry.
-
- Buyer
- CUBE
- Target
- 4CRisk.ai (4CRisk)
- Industry
- Cybersecurity
- Location
- California, United States
- Type
- Buyout
CUBE, a provider of Automated Regulatory Intelligence and Regulatory Change Management, announced the acquisition of 4CRisk.ai, a Silicon Valley RegTech firm focused on agentic AI mapping of policies and procedures to regulatory obligations, controls, and risks. The deal expands CUBE’s coverage beyond financial regulation into adjacent corporate regulatory domains such as cyber, AI, privacy, labor laws, and ESG. Financial terms were not disclosed.
-
February 23, 2026
- Buyer
- Arctic Wolf
- Target
- Sevco Security
- Industry
- Cybersecurity
- Location
- Texas, United States
- Type
- Buyout
Arctic Wolf has acquired Sevco Security, a Visionary-ranked exposure assessment platform, to integrate Sevco’s asset intelligence and exposure assessment capabilities into the Arctic Wolf Aurora Platform. The acquisition expands Arctic Wolf’s proactive security and exposure management capabilities for customers and MSPs by unifying asset intelligence, vulnerability context, and security control coverage.
-
February 20, 2026
- Buyer
- Markon, Sterling Investment Partners
- Target
- Millennium Corporation
- Industry
- Cybersecurity
- Location
- Virginia, United States
- Type
- Addon
Markon, a Sterling Investment Partners portfolio company, has acquired Millennium Corporation to expand full‑spectrum cyber capabilities across defense, intelligence, and federal civilian markets. The deal combines Markon’s enterprise delivery and program execution strengths with Millennium’s adversarial threat emulation, cyber operations, testing, training, and software capabilities as an add‑on to Markon’s platform.
-
February 19, 2026
- Buyer
- Palo Alto Networks
- Target
- Koi
- Industry
- Cybersecurity
- Location
- Israel
- Type
- Buyout
Palo Alto Networks entered into a definitive agreement to acquire Koi, which focuses on agentic endpoint security for enterprise environments. The acquisition is intended to close an AI-driven security gap by integrating Koi’s technology with Palo Alto Networks’ Prisma AIRS platform and enhancing its Cortex XDR endpoint security capabilities.
-
February 19, 2026
- Buyer
- Palo Alto Networks
- Target
- CyberArk
- Industry
- Cybersecurity
- Location
- Massachusetts, United States
- Type
- Buyout
Palo Alto Networks (PANW) announced it has entered into a definitive agreement to acquire CyberArk (CYBR) in a cash-and-stock transaction valued at approximately $25 billion in equity value. Under the terms, CyberArk shareholders will receive $45.00 in cash and 2.2005 shares of Palo Alto Networks common stock for each CyberArk share.
-
February 17, 2026
- Buyer
- Collective Defence
- Target
- ITC Secure, IronNet
- Industry
- Cybersecurity
- Location
- Luxembourg
- Type
- Buyout
ITC Secure and IronNet have combined to form Collective Defence, a Luxembourg-headquartered cybersecurity company focused on protecting critical infrastructure from state-sponsored and hybrid threats. The new company brings together ITC Secure's managed security and advisory capabilities with IronNet's collective defence and network detection technology, and will leverage a strategic partnership with Microsoft to embed AI across its security operations.
-
February 17, 2026
- Buyer
- Booz Allen Hamilton
- Target
- Defy Security, LLC
- Seller
- Sverica Capital Management LP
- Industry
- Cybersecurity
- Location
- Pennsylvania, United States
- Type
- Buyout
Booz Allen Hamilton entered into a definitive agreement to acquire Defy Security as a wholly owned subsidiary. The acquisition is expected to close in Booz Allen’s fiscal first quarter 2027 (subject to customary closing conditions and regulatory approvals) and will combine Defy’s cyber solutions and vendor relationships with Booz Allen’s commercial and federal cybersecurity capabilities.
-
February 17, 2026
- Buyer
- Senstar Technologies Corporation
- Target
- Blickfeld GmbH
- Industry
- Cybersecurity
- Location
- Germany
- Type
- Buyout
Senstar Technologies Corporation has completed its acquisition of Blickfeld GmbH after receiving regulatory approval and satisfying customary closing conditions. The cash-funded deal adds Blickfeld’s 3D LiDAR sensor range and integrated software to Senstar’s physical/video security platform.
-
February 17, 2026
- Buyer
- Valiant Solutions, LLC
- Target
- Abile Group
- Industry
- Cybersecurity
- Location
- United States
- Type
- Addon
Valiant Solutions, LLC announced it has acquired Abile Group, a provider of secure network and cyber engineering services and technology for national security customers. The deal expands Valiant’s cybersecurity technical depth—particularly in endpoint protection, cloud-native architectures, and network engineering—to support Zero Trust and cyber-enabled mission requirements across classified and unclassified environments.
-
February 13, 2026
- Buyer
- Endor Labs
- Target
- Autonomous Plane
- Industry
- Cybersecurity
- Location
- United States
- Type
- Buyout
Endor Labs, the AI-native application security platform, has acquired Autonomous Plane, a cloud-native application security startup founded by Kyle Quest, to add full‑stack reachability from source code through container images. The deal expands Endor Labs' platform capabilities for container reachability analysis, improving vulnerability prioritization and reducing false positives for enterprise and regulated customers.
-
February 13, 2026
- Buyer
- Texas Instruments
- Target
- Silicon Labs
- Industry
- Cybersecurity
- Location
- Texas, United States
- Type
- Buyout
Texas Instruments (TI) has agreed to acquire Silicon Labs, a provider of secure embedded wireless connectivity, for about $7.5 billion in an all-cash transaction. Under the definitive agreement, Silicon Labs stockholders will receive $231.00 per share at closing, and the deal is expected to close in the first half of 2027 subject to regulatory approvals and customary conditions.
-
February 12, 2026
- Buyer
- Proofpoint, Inc.
- Target
- Acuvity
- Industry
- Cybersecurity
- Location
- California, United States
- Type
- Buyout
Proofpoint, Inc. announced it has acquired Acuvity, an AI enterprise security and governance platform, to expand human- and agent-centric cybersecurity capabilities. The combined offering is intended to provide AI-native visibility, governance, and runtime protection for AI and agent-driven workflows.
-
February 12, 2026
- Buyer
- Logicalis US
- Target
- Maple Woods Enterprises
- Industry
- Cybersecurity
- Location
- Ohio, United States
- Type
- Buyout
Logicalis US has acquired Maple Woods Enterprises to integrate its Overwatch cybersecurity and compliance capabilities into Logicalis’ managed security services. Maple Woods’ founder Rob Edwards will join Logicalis US as Vice President, Security and Innovation as the combined team expands Overwatch into additional verticals including healthcare and SLED while preserving its defense-grade compliance rigor.
-
February 10, 2026
- Buyer
- Vosker
- Target
- Reconeyez
- Industry
- Cybersecurity
- Location
- Quebec, Canada
- Type
- Buyout
Vosker announced the acquisition of Reconeyez, an AI-powered autonomous intelligent surveillance provider serving large enterprises and international government agencies. The deal is intended to accelerate Vosker’s global B2B channel strategy and expand its geographic and end-market presence, leveraging Reconeyez and its Defendec brand deployed in over 60 countries. Alongside the acquisition, Vosker also closed a US$200 million senior debt financing facility.
-
February 10, 2026
- Buyer
- Entech
- Target
- C2 Computer Services, Inc. (C2CSI)
- Industry
- Cybersecurity
- Location
- Florida, United States
- Type
- Addon
Entech, a Florida-based managed IT, AI, and cybersecurity services provider, announced it is acquiring Coral Springs–based C2 Computer Services, Inc. (C2CSI), a fully managed cybersecurity and IT services firm serving South Florida. The acquisition expands Entech’s East Coast footprint and deepens its managed security and strategic IT guidance capabilities for clients across Florida.
-
February 10, 2026
- Buyer
- Trust Science
- Target
- Lenders API
- Industry
- Cybersecurity
- Location
- Ontario, Canada
- Type
- Buyout
Edmonton-based Trust Science acquired Toronto-based fraud prevention platform Lenders API to help lenders build an industry-wide defense against coordinated lending fraud. The deal closed last week and will be integrated into Trust Science’s AI-powered risk and decisioning infrastructure, while Lenders API’s consortium platform continues to support lenders collaboratively spotting fraud.
-
February 9, 2026
- Buyer
- Varonis
- Target
- AllTrue.ai
- Industry
- Cybersecurity
- Location
- Canada
- Type
- Buyout
Varonis agreed to acquire AllTrue.ai to expand its data security platform into AI Trust, Risk, and Security Management (AI TRiSM). AllTrue.ai provides visibility into AI assets and runtime guardrails, helping enterprises control and monitor how AI systems behave and access data.
-
February 8, 2026
- Buyer
- Securitas
- Target
- Liferaft (Social Navigator Inc.)
- Industry
- Cybersecurity
- Location
- Nova Scotia, Canada
- Type
- Buyout
Securitas has signed a binding agreement to acquire Liferaft (operating under the brand Social Navigator Inc.), a SaaS-based open-source intelligence (OSINT) and threat intelligence platform provider. The acquisition is expected to be finalized in the first half of 2026, subject to customary closing conditions, and Liferaft will continue operating as its own business.
-
- Buyer
- Semperis
- Target
- MightyID
- Industry
- Cybersecurity
- Location
- California, United States
- Type
- Buyout
Semperis, the identity-driven cyber resilience and crisis management company, has acquired MightyID, an identity resilience specialist for cloud identity providers Okta and Ping. The acquisition expands Semperis' platform to provide backup, restore, migration, failover and faster recovery across hybrid and multi-cloud identity environments.
-
February 2, 2026
- Buyer
- Infoblox
- Target
- Axur
- Industry
- Cybersecurity
- Type
- Buyout
Infoblox entered into a definitive agreement to acquire Axur, a provider of AI-powered security solutions. The deal is intended to expand Infoblox’s pre-emptive security capabilities by enabling earlier detection and rapid AI-powered takedowns against AI-driven phishing, impersonation, fraud, brand abuse, and credential/data theft.
-
February 1, 2026
- Buyer
- Quantum Leap
- Target
- Veros Technologies
- Seller
- Razor's Edge
- Industry
- Cybersecurity
- Location
- Virginia, United States
- Type
- Buyout
Veros Technologies, a portfolio company of Razor's Edge, has announced its acquisition by Quantum Leap, a portfolio company of Carlyle. Terms of the transaction were not disclosed. Veros provides advanced cyber and operational capabilities to U.S. Government customers, particularly within the Intelligence Community.
-
January 30, 2026
- Buyer
- Pye-Barker Fire & Safety
- Target
- The Alarm Group
- Seller
- HESI Security, Network Alarm Services
- Industry
- Cybersecurity
- Location
- Oklahoma, United States
- Type
- Buyout
Pye-Barker Fire & Safety acquired The Alarm Group to expand its security and alarm offerings in Oklahoma. The Alarm Group, based in Oklahoma City and Lawton, provides commercial security systems including burglar and fire alarms, access control, video surveillance, and mobile security towers with 24-hour live monitoring.
-
January 30, 2026
- Buyer
- Palo Alto Networks, Inc.
- Target
- Chronosphere, Inc.
- Seller
- a group of shareholders
- Industry
- Cybersecurity
- Location
- United States
- Type
- Buyout
Palo Alto Networks agreed to acquire Chronosphere, an observability platform, for about $3.35 billion in cash and replacement equity awards (plus subject to adjustments), to advance AI-era observability and security. The acquisition integrates Chronosphere’s cloud-native telemetry with Palo Alto Networks’ Cortex AgentiX/AI-agent capabilities to enable real-time autonomous remediation. The deal was completed on January 29, 2026.
-
January 29, 2026
- Buyer
- LevelBlue
- Target
- Alert Logic (managed services business)
- Seller
- Fortra, Alert Logic
- Industry
- Cybersecurity
- Location
- Minnesota, United States
- Type
- Divestiture
LevelBlue has acquired Fortra’s Alert Logic managed services business—covering Alert Logic’s MDR, XDR, and WAF managed services—under a broader long-term strategic partnership that makes Fortra a leading technology partner for LevelBlue. The deal expands LevelBlue’s global managed detection and response platform and provides Alert Logic customers access to a larger global footprint and broader threat telemetry; Santander and Stephens served as financial advisors to LevelBlue and Fortra/Alert Logic, respectively.
-
January 28, 2026
- Buyer
- Mitsubishi Electric Corporation
- Target
- Nozomi Networks Inc.
- Industry
- Cybersecurity
- Location
- California, United States
- Type
- Buyout
Mitsubishi Electric Corporation completed its acquisition of Nozomi Networks, making Nozomi Networks a wholly owned subsidiary operating independently. The deal strengthens Mitsubishi Electric’s AI-powered, cloud-first OT/IoT cybersecurity software capabilities while preserving Nozomi’s brand, leadership, teams, and go-to-market partnerships.
-
January 28, 2026
- Buyer
- CyberMaxx
- Target
- Corvid Cyberdefense
- Industry
- Cybersecurity
- Location
- North Carolina, United States
- Type
- Buyout
CyberMaxx, a Linthicum Heights, Maryland–based managed detection and response provider, has acquired Corvid Cyberdefense, a Mooresville, North Carolina–based email security services provider. The acquisition adds Corvid’s managed email security and Elastic SIEM capabilities, more than 130 customers, and strengthens CyberMaxx’s channel-focused, tech-enabled security offering.
-
January 27, 2026
- Buyer
- Libraesva, Cyber Guru
- Target
- Cyber Guru, Libraesva
- Industry
- Cybersecurity
- Location
- Italy
- Type
- Buyout
Libraesva and Cyber Guru announced a strategic combination to create a new European cybersecurity group focused on human-centric protection. The combined offering integrates Libraesva’s privacy-first email security with Cyber Guru’s AI-driven security awareness training to reduce email and social-engineering risks.
-
January 26, 2026
- Buyer
- Radware Ltd.
- Target
- Pynt
- Industry
- Cybersecurity
- Location
- United States
- Type
- Buyout
Radware (NASDAQ: RDWR) has completed its acquisition of Pynt, an API security testing company. The deal adds pre-production API security testing to Radware’s existing API discovery, posture management, business logic protection, and runtime defenses to provide continuous, risk-driven API security across the full application lifecycle.
-
January 23, 2026
- Buyer
- FGS Global
- Target
- Memetica
- Industry
- Cybersecurity
- Location
- Massachusetts, United States
- Type
- Buyout
FGS Global launched a new AI Advisory practice and acquired Memetica, a specialist threat intelligence consultancy founded in 2019 by Ben Decker. The purchase integrates Memetica’s AI-driven threat detection and dark‑web monitoring capabilities into FGS’s global AI and Innovation group to strengthen early‑warning, tipping‑point analysis and reputational defense offerings.
-
January 20, 2026
- Buyer
- Integrity360
- Target
- Advantus360
- Industry
- Cybersecurity
- Location
- Alberta, Canada
- Type
- Addon
Integrity360 has acquired Calgary-based cybersecurity services provider Advantus360 to establish the group’s first North American hub. The deal — terms undisclosed — gives Integrity360 an operating base in Canada and will be used to develop a Calgary Security Operations Centre and expand the group’s managed and professional cyber services across Canada and the US.
-
January 13, 2026
- Buyer
- CrowdStrike, Inc.
- Target
- Seraphic Security
- Industry
- Cybersecurity
- Location
- Texas, United States
- Type
- Buyout
CrowdStrike has signed a definitive agreement to acquire Seraphic Security to extend its Falcon platform into the browser with continuous, in-session browser runtime protection. The integration is intended to support CrowdStrike’s Next-Gen Identity Security strategy by combining Falcon endpoint telemetry and threat intelligence with Seraphic’s browser-native controls and SGNL’s continuous authorization technology. The acquisition is expected to close in CrowdStrike’s first quarter of fiscal 2027, subject to customary closing conditions.
-
January 12, 2026
- Buyer
- Sole Source Capital LLC
- Target
- Brite
- Industry
- Cybersecurity
- Location
- New York, United States
- Type
- Buyout
Sole Source Capital LLC has acquired Brite, a cybersecurity and managed IT services provider headquartered in Victor, New York, marking Sole Source's first platform investment from SSC Partners Fund III. The deal positions Brite as a buy-and-build platform to pursue consolidation in the fragmented cybersecurity managed services market; financial terms were not disclosed and Brite's existing management team will remain in place.
-
January 11, 2026
- Buyer
- Magnet Defense LLC
- Target
- Advanced Technology Group (ATG)
- Industry
- Cybersecurity
- Location
- United States
- Type
- Buyout
Magnet Defense entered into a definitive agreement to acquire Advanced Technology Group (ATG), subject to customary closing conditions. The deal is intended to speed integration of ATG’s open-architecture AI capabilities into Magnet Defense’s DefendAI battlespace management suite and its autonomy stack for end-to-end autonomous maritime defense operations.
-
January 10, 2026
- Buyer
- CrowdStrike
- Target
- SGNL
- Industry
- Cybersecurity
- Type
- Buyout
CrowdStrike has signed a definitive agreement to acquire SGNL in a deal reported to be worth about $740 million. CrowdStrike plans to use SGNL’s continuous, real-time authorization approach as a runtime access enforcement layer to expand its Falcon Next-Gen Identity Security offering for human users, non-human identities, and AI agents.
-
January 9, 2026
- Buyer
- Ping Identity
- Target
- Keyless
- Industry
- Cybersecurity
- Location
- United Kingdom
- Type
- Buyout
Ping Identity has completed its acquisition of Keyless, a London-based provider of privacy-preserving “Zero-Knowledge Biometrics” for biometric authentication. The added technology is intended to strengthen enterprise defenses against AI-driven identity attacks (including deepfakes, impersonation, and account takeover) by enabling fast re-verification without storing retrievable biometric data.
-
January 9, 2026
- Buyer
- ThreatModeler, Invictus Growth Partners
- Target
- IriusRisk
- Industry
- Cybersecurity
- Location
- Spain
- Type
- Addon
ThreatModeler has acquired IriusRisk to combine two enterprise threat-modeling platforms, broaden global scale, and accelerate product development. The combined business — majority owned by Invictus Growth Partners, with Paladin Capital Group remaining a shareholder — aims to create the industry’s largest proprietary threat-model dataset and deepen secure-by-design support for security and development teams.
-
January 8, 2026
- Buyer
- Axiom GRC
- Target
- AssurancePoint
- Industry
- Cybersecurity
- Location
- Georgia, United States
- Type
- Buyout
London-headquartered Axiom GRC has acquired AssurancePoint, an Atlanta-based SOC and ISO audit and advisory firm, to strengthen its North American cyber compliance and assurance capabilities. AssurancePoint will integrate with Axiom's U.S. platform IS Partners to expand audit capacity, scale recurring audit delivery, and deepen the company's U.S. delivery footprint.
-
- Buyer
- Gryphon Investors
- Target
- Fortreum
- Industry
- Cybersecurity
- Location
- Virginia, United States
- Type
- Recapitalization
Gryphon Investors has completed a majority growth recapitalization of Fortreum, a Lansdowne, Virginia-based cybersecurity services firm specializing in compliance, audit, and technical testing including FedRAMP, CMMC, ISO, PCI, and SOC. The investment will fund expansion of Fortreum's offerings and accelerate development and adoption of its XRAMP continuous validation platform and AI-enabled capabilities; company founders will retain a significant equity stake. Financial terms were not disclosed.
-
December 26, 2025
- Buyer
- Complete, Heritage Holding
- Target
- Columbia Advisory Group, LLC
- Seller
- Columbia Advisory Group shareholders
- Industry
- Cybersecurity
- Location
- Texas, United States
- Type
- Addon
Complete, a Charlotte-based MSP backed by private investment firm Heritage Holding, has acquired Columbia Advisory Group (CAG), a Dallas-based cybersecurity and GRC consulting firm. The add-on expands Complete's managed IT and cybersecurity capabilities and brings CAG's expertise serving higher education, state and local government, and mid-market enterprise clients into Complete's platform.
-
- Buyer
- ServiceNow
- Target
- Armis
- Industry
- Cybersecurity
- Location
- California, United States
- Type
- Buyout
ServiceNow entered into an agreement to acquire Armis for approximately $7.75 billion in cash, expected to close in the second half of 2026, subject to regulatory approvals and customary closing conditions. The acquisition is intended to expand ServiceNow’s security workflow capabilities across the full attack surface spanning IT, operational technology (OT), and medical devices, combining Armis cyber exposure management with ServiceNow’s AI and workflow platform.
Track M&A activity that matters to you
Get real-time deal alerts, build buyer lists with AI, and access our full acquisition database. Start your free trial today.
Frequently Asked Questions
What types of buyers are active in cybersecurity M&A?
Both strategic vendors (for example Palo Alto Networks, Proofpoint, Arctic Wolf) and platform buyers backed by private equity (recurring names in the dataset include Clearlake Capital Group, L.P., Thoma Bravo, TPG) are active. Regional MSSPs and specialist providers such as CyberMaxx also pursue bolt‑on acquisitions.
Which technology themes are being acquired?
Recent deals emphasize identity security, AI‑native security and governance, exposure/asset intelligence, container and application security, and expansion of managed detection and response (MDR/XDR) and other managed services.
Are cybersecurity deals concentrated in particular geographies?
Most recent transactions are U.S.‑based (notable states include Texas, Virginia, Massachusetts, California, Ohio, and Florida). There is also cross‑border activity, such as the Luxembourg combination that formed Collective Defence.
How are defense and federal cyber capabilities represented?
Buyers focused on government and defense markets are active: Markon’s acquisition of Millennium Corporation and Woven Solutions’ acquisition of Apira Technologies illustrate deals that broaden adversarial testing, cyber operations, and mission software capabilities.