Cybersecurity Acquisitions

KeyData Cyber, a portfolio company of CIVC Partners, acquired BeyondID, an AI-powered Managed Identity Solutions Provider focused on identity and access management and zero-trust solutions. The transaction expands KeyData Cyber’s advisory, implementation, and managed services capabilities and adds BeyondID’s Identity Command Center platform, strengthening the combined firm’s North American identity security footprint.

Sensiba LLP acquired AssuranceLab Pty. Ltd., a high-growth cybersecurity audit and risk assurance firm headquartered in Australia. The deal expands Sensiba’s international reach and strengthens its security, privacy, compliance, and cybersecurity assurance capabilities for a global client base.

Sophos completed its all-cash acquisition of Secureworks for approximately $859 million, taking Secureworks private and ending its Nasdaq listing. The combination expands Sophos’ managed detection and response (MDR) and broader cybersecurity platform capabilities, including adding Secureworks’ Counter Threat Unit and advisory teams. Sophos is backed by Thoma Bravo, and Secureworks shareholders (including Dell Technologies) will receive $8.50 per share in cash.

CyberMaxx announced it has closed the acquisitions of Cybersafe Solutions and onShore Security to expand and scale its modern managed detection and response (MDR) services. The transactions add security resources, domain expertise, and enterprise-grade cybersecurity capabilities, with the combined organization operating under the CyberMaxx brand.

Synerion USA Inc., a cloud-based workforce management software provider, announced the acquisition of Qumulex Inc., a cloud-native video surveillance and access control platform. The deal expands Synerion’s offerings into the physical security market, enhancing its access control and video surveillance capabilities as part of its broader growth strategy.

Garda World Security Corporation (GardaWorld) entered into a binding agreement to acquire OnSolve, LLC, a provider of critical event management software and services. GardaWorld plans to combine OnSolve with its Crisis24 business to create a more comprehensive, AI-enhanced integrated risk management and critical event management offering.

Fortinet Inc. has agreed to acquire Lacework Inc., a cloud security startup that provides a cloud-native application protection platform (CNAPP) for securing hybrid cloud environments. Financial terms were not disclosed, and Fortinet plans to integrate Lacework’s CNAPP into its broader cybersecurity product portfolio once the deal closes later this year.

Search fund Aurias acquired Saepio Information Security, a UK-based cyber security services provider. Aurias, founded by Daniel Cardenas-Clark and Amir Nooriala (now co-CEOs of Saepio), plans to build on Saepio’s growth through expanded services and international expansion.

Cohesity Inc. announced it will acquire Veritas Technologies LLC’s data protection unit, creating a combined company expected to be valued at about $7 billion with pro forma annual revenue of $1.6 billion. The merged entity will be led by Cohesity CEO Sanjay Poonen and will expand Cohesity’s portfolio with Veritas offerings such as NetBackup and related appliances. Carlyle (Veritas’ majority stakeholder) and other investors will participate in the transaction, which is expected to close by year-end subject to regulatory approval.

IP Pathways, a technology solutions provider headquartered in Des Moines, Iowa, announced the acquisition of Tenax Solutions, a security solutions provider. The deal expands IP Pathways’ security and compliance capabilities, including services such as vulnerability scanning, penetration testing, and compliance examinations, to better serve clients across the United States.

SonicWall announced it has acquired Solutions Granted, Inc. (SGI), a Managed Security Service Provider serving MSPs and MSSPs. The deal expands SonicWall’s managed security offerings to include U.S.-based SOC-as-a-Service, Managed Detection and Response (MDR), and related managed services tailored for channel partners.

Cuentas, Inc. signed a binding letter of intent to complete a share-exchange transaction that would make World Health Energy Holdings, Inc. (d/b/a WHEN Group) a majority-owned subsidiary of Cuentas, subject to Nasdaq and shareholder approvals and other conditions. As part of the deal, WHEN Group’s majority shareholder UCG, Inc. will exchange its 75% stake in WHEN Group for Cuentas shares representing 50% of Cuentas’ fully diluted outstanding capital at issuance. The companies plan to integrate WHEN Group’s cybersecurity and AI solutions into the Cuentas Mobile platform and offer them to Cuentas’ FinTech partners.

Neovera, a cybersecurity and managed services provider, announced the acquisition of 10-D Security and AppliedCS. The deal expands Neovera’s cybersecurity, risk management, and compliance capabilities, particularly serving financial institutions and addressing evolving regulatory and security requirements.

Cisco entered into a definitive agreement to acquire Splunk in an all-cash transaction valued at approximately $28 billion in equity value ($157 per share). The combination is intended to strengthen Cisco’s security and observability offerings and accelerate its shift toward more recurring software revenue. The deal is expected to close by the end of the third quarter of calendar year 2024, subject to regulatory and Splunk shareholder approvals.

Parsons Corporation acquired Sealing Technologies, Inc. (SealingTech) in a transaction valued at up to $200 million, including $175 million in cash at closing. SealingTech, headquartered in Columbia, Maryland, provides cybersecurity research, engineering, and integration services supporting U.S. Department of Defense and Intelligence Community customers. Chesapeake Corporate Advisors served as exclusive financial advisor to SealingTech on the sale.

Stallion Infrastructure Services, Ltd. completed the acquisition of EyeSite Surveillance, Inc. and EyeOn Monitoring Services, Inc. (collectively, “EyeSite”) on August 31, 2023. The deal expands Stallion’s video surveillance offerings, adding mobile solar-powered surveillance systems and monitoring/SOC capabilities for commercial and residential construction jobsites. EyeSite operates in Arizona and Texas, with offices including Dallas, Houston, Phoenix, and Tucson.

Netskope, a Secure Access Service Edge (SASE) leader, announced it has acquired digital experience monitoring company Kadiska. The deal is intended to strengthen Netskope’s Proactive Digital Experience Management (DEM) capabilities by integrating Kadiska’s end-to-end user experience monitoring across network and cloud/SaaS applications.

Malwarebytes announced the acquisition of Cyrus, an online privacy solutions company, to expand its consumer-focused security and privacy offerings. The deal brings Cyrus’ team and technology into Malwarebytes to strengthen mobile and online privacy capabilities, including products like Privacy VPN and Browser Guard.

Owl Cyber Defense acquired Big Bad Wolf Security (BBWS), a Maryland-based cloud cybersecurity company focused on next-generation cloud infrastructure security and cross domain solutions. The acquisition expands Owl’s cross domain solutions portfolio into cloud-native capabilities such as Cloud CDS and strengthens its expertise in areas like Identity and Access Management configuration across major cloud providers.

Check Point Software Technologies signed a definitive agreement to acquire Perimeter 81, a Security Service Edge (SSE) company, for approximately $490 million on a cash-free, debt-free basis. Check Point plans to integrate Perimeter 81’s capabilities into its Check Point Infinity architecture to deliver a unified SASE/SSE security solution across network, cloud, and remote users. The transaction is subject to customary closing conditions and is expected to close in the third quarter of 2023.

Graylog acquired Resurface.io's data-driven API security platform to expand its SIEM and log management security portfolio. The deal will integrate Resurface.io’s API traffic capture and threat detection capabilities with Graylog’s SIEM to provide a combined API Threat Detection and Incident Response offering branded as Graylog API Security.

Sverica Capital Management announced a strategic growth investment in Zyston, a provider of end-to-end cybersecurity solutions and managed detection and response services. Zyston will continue to be led by founder and CEO Craig Stamm, and Sverica representatives will join Zyston’s board as part of the transaction.

Global Market Innovators (GMI) announced the acquisition of CyVig, a managed security service provider (MSSP), to strengthen GMI’s security operations and managed services capabilities. The deal enhances GMI’s ability to deliver end-to-end secure technology solutions and 24/7 cybersecurity services as it advances its vision of becoming a Secure Managed Services Provider.

Node4, a cloud-led digital transformation managed services provider, announced the acquisition of ThreeTwoFour, an information security and technology risk specialist. The deal strengthens Node4’s cybersecurity and technology risk capabilities and expands its reach in financial services, banking, and public sector/government frameworks.

Snyk agreed to acquire Enso Security, a pioneer of Application Security Posture Management (ASPM), to enhance Snyk’s developer security platform and help enterprises secure software supply chains at scale. The deal is subject to customary closing conditions and is expected to close in Q2 2023.

Stealth Monitoring acquired Caliber Communications and Syncro Monitoring (collectively, Caliber) to expand its technology-driven commercial video surveillance and remote video monitoring capabilities across North America. The deal adds Caliber’s patented technology and AI-enabled platform, and was supported by a new capital investment from Stealth’s existing investors Twin Point Capital, LLR Partners, and Auxo Management.

Cradlepoint, a subsidiary of Ericsson, acquired Ericom Software and its cloud-based enterprise security platform. The deal strengthens Cradlepoint’s SASE and zero trust security strategy and will underpin the new Cradlepoint NetCloud Threat Defense cloud service for hybrid 5G and wireline environments.

Splashtop has acquired Foxpass, a cloud-based identity-centric network and server access management provider, to broaden its remote access and security portfolio. Foxpass will remain a brand and product line within Splashtop, and Splashtop plans to retain Foxpass employees and invest in accelerating the Foxpass product roadmap. Financial terms were not disclosed.

Rapid7, Inc. acquired Minerva Labs, Ltd., a provider of anti-evasion and ransomware prevention technology, to enhance Rapid7’s Managed Detection and Response (MDR) offering. The deal extends Rapid7’s managed threat detection and orchestration capabilities from endpoint to cloud resources. Rapid7 will pay approximately $38 million in cash and stock, subject to adjustments.

ScalePad acquired ControlMap, a governance, risk, and compliance (GRC) platform built for managed service providers (MSPs). The combination expands ScalePad’s offerings into automated cybersecurity compliance (Compliance as a Service) across frameworks such as SOC 2, HIPAA, CMMC2, and ISO 27001, integrating with ScalePad’s MSP-focused product suite.

Periscope Equity’s portfolio company CyberMaxx acquired CipherTechs to expand its full-spectrum cybersecurity services. The combination strengthens CyberMaxx’s offensive and defensive security offerings, DFIR, and governance, risk & compliance capabilities. CyberMaxx also announced the appointment of Brian Ahern as CEO to help drive growth.

Nomios Group has completed the acquisition of a majority stake in Aditinet, an Italian cybersecurity system integration and professional services firm. The deal expands Nomios’ presence in Southern Europe and adds capabilities such as ethical hacking, while Aditinet’s founder-CEO Paolo Marsella and CFO Alberto Mez remain minority shareholders and continue to run the business through integration.

Accenture has acquired Morphus, a privately held Brazil-based provider of cyber defense, risk management, and cyber threat intelligence services. The deal expands Accenture Security’s capabilities and footprint in Brazil and Latin America, adding Morphus Labs and more than 230 cybersecurity professionals. Financial terms were not disclosed.

GreenPages Technology Solutions acquired Arcas Risk Management, a Massachusetts-based cybersecurity, risk advisory, and compliance consulting firm, in a transaction completed on February 1, 2023. The deal expands GreenPages’ cybersecurity practice, adding capabilities including incident response, risk assessments, cybersecurity programs, and security operations.

Redwood Software acquired Cerberus, a secure file transfer provider best known for Cerberus FTP Server. The deal expands Redwood’s enterprise automation and managed file transfer portfolio and strengthens its secure file transfer automation capabilities for large global organizations.

Phenna Group has acquired PKI Solutions to expand its cybersecurity capabilities and broaden its international presence. Based in Portland, Oregon, PKI Solutions provides public key infrastructure (PKI) products, services, and training, including its PKI Spotlight management solution.

Beyon Cyber, part of the Beyon Group, agreed to acquire a majority stake in DTS Solution, a cybersecurity advisory, consulting, and engineering firm. DTS Solution is headquartered in Dubai, United Arab Emirates, and the transaction is intended to expand Beyon Cyber’s regional footprint and broaden its cybersecurity offerings.

Cerberus Sentinel (NASDAQ: CISO) signed a definitive agreement to acquire RAN Security, a cybersecurity company headquartered in Buenos Aires, Argentina. RAN Security will become a wholly owned subsidiary, with founder and CEO Roberto Tursi continuing to lead the business. The transaction is expected to close later in the year, subject to customary closing conditions and regulatory approvals.

Sign In Solutions, a cloud-based visitor management and risk mitigation software provider backed by PSG, acquired ThreatSwitch. The deal expands Sign In Solutions’ VM 2.0 vision by adding ThreatSwitch’s cloud-based compliance, approvals, and workspace management capabilities to complement its core visitor management platforms.

Ethixbase, a provider of third-party risk management solutions, completed its acquisition of Tcompliance (formerly known as TRACE Inc.). The combination is intended to create a more comprehensive offering for third-party and supply chain risk management, including enhanced due diligence, ESG risk benchmarking, monitoring, and certification capabilities. Financial terms were not disclosed.

Thoma Bravo completed its all-cash acquisition of Ping Identity in a transaction valued at approximately $2.8 billion. Ping Identity stockholders will receive $28.50 per share, and the company’s shares have ceased trading and will be delisted from the New York Stock Exchange.

SilverEdge Government Solutions, backed by Godspeed Capital Management, has acquired QVine LLC, a provider of agile software development, cloud services, and SaaS solutions for U.S. Intelligence Community customers. The deal adds QVine’s SOAR software development platform and expands SilverEdge’s cyber and technology solutions capabilities. QVine’s leadership team will remain in place and will co-invest equity in the transaction.

Bitwarden secured a $100 million minority growth investment led by PSG, with participation from existing investor Battery Ventures. The funding will support Bitwarden’s product expansion and scaling of its open-source password management platform for individuals and enterprises.

HCAP Partners, in partnership with BOK Financial, announced an investment in Lumifi Cyber, a managed detection and response (MDR) cybersecurity software provider. The investment helped fund Lumifi Cyber’s acquisition of Datashield, expanding Lumifi’s capabilities with Datashield’s MDR services and security operations expertise. Financial terms were not disclosed.

MicroAge announced the acquisition of cStor, a provider of cybersecurity, modern infrastructure, and digital transformation solutions. The deal expands MicroAge’s digital transformation service offerings by adding a mature cybersecurity practice and deeper data center delivery, networking engineering, and professional services capabilities.

Forescout Technologies has completed its acquisition of Cysiv, a cloud-platform cybersecurity company focused on improving threat detection and response. The deal is intended to enhance Forescout’s automated cybersecurity capabilities by combining Forescout’s agentless visibility and automation with Cysiv’s cloud-native threat analytics and data science to enable closed-loop threat protection.

Microsoft has entered into an agreement to acquire Miburo, a cyber threat analysis and research company focused on detecting and responding to foreign information operations. Miburo will join Microsoft’s Customer Security and Trust organization, strengthening Microsoft’s threat intelligence and analysis capabilities against nation-state and influence-based cyber threats.

Thrive, a managed cybersecurity and digital transformation services provider and portfolio company of Court Square Capital Management, acquired Edge Technology Group. The combination expands Thrive’s global footprint with additional offices and data centers across the United Kingdom and Asia-Pacific, strengthening its managed services offering for financial-industry clients.

Johnson Controls acquired Tempered Networks, a Seattle, Washington-based zero trust cybersecurity provider known for its Airwall technology. The deal strengthens Johnson Controls’ OpenBlue platform by adding software-defined perimeter security, micro-segmentation, and granular access control for connected building networks from edge to cloud. Financial terms were not disclosed.

Centroid Systems, LLC has completed the acquisition of Guardian Eagle, a St. Petersburg, Florida-based consulting provider focused on data and database security. The deal expands Centroid’s data security technologies and expertise to enhance its end-to-end cloud transformation, consulting, and managed services offerings. VSS, a private investment firm and board member of Centroid, highlighted the strategic fit of Guardian Eagle’s team and client portfolio with Centroid.

CyberGuard Compliance, LLP (CGC) sold its assets to private equity firm Atlantic Street Capital (ASC) in a transaction completed on June 13, 2022. CGC provides IT compliance and cybersecurity audit and assessment services, including SOC, HITRUST, and PCI audits, as well as vulnerability assessments and penetration testing. XLCS Partners served as exclusive advisor to CGC on the sale.

DigiCert, Inc. announced it has acquired DNS Made Easy, a provider of enterprise-grade managed DNS services, including its affiliated brand Constellix. The deal expands DigiCert’s digital trust portfolio by adding managed DNS capabilities to complement its certificate lifecycle management offerings; financial terms were not disclosed.

Vector Capital entered into a definitive agreement to make a large new equity investment in WatchGuard Technologies and become its majority shareholder. As part of the transaction, Vector Capital will acquire interests previously owned by Francisco Partners and other co-investors; financial terms were not disclosed and closing is expected by the end of Q3 2022, subject to customary conditions.

KKR signed a definitive agreement for its investment funds to purchase Barracuda Networks Inc., a cloud-first cybersecurity software provider, from Thoma Bravo. Financial terms were not disclosed, and the transaction is expected to close by year-end subject to customary conditions.

Airiam, a newly formed managed IT and digital transformation firm with a strong cybersecurity focus, announced the acquisitions of Syntervision (Alabama) and Transcendent (Wisconsin). The deals expand Airiam’s managed IT and cybersecurity platform offerings for small and mid-sized enterprises; financial terms were not disclosed.

Radian Generation, backed by 424 Capital, acquired Green IT Energy Applications to expand its operational technology, cybersecurity services, and software offerings for the renewable energy industry. Green IT’s team and software platforms will be integrated into Radian to provide an end-to-end lifecycle solution for managing renewable energy assets.

Spire Capital Partners completed a controlling investment in Pen-Link Inc. (PenLink), a provider of mission-critical communications surveillance and investigative software for law enforcement agencies. Based in Lincoln, Nebraska, PenLink will partner with Spire Capital to accelerate growth, deepen penetration in the U.S. government market, and expand into new geographies and product adjacencies.

Two Six Technologies acquired River Loop Security LLC to enhance its highly technical cybersecurity and embedded systems capabilities for national security and commercial customers. River Loop adds expertise in hardware reverse engineering, wireless and IoT security, penetration testing, and specialized cybersecurity R&D, including its Pilot Security IoT firmware analysis platform.

Mission Critical Partners (MCP) has acquired Secure Halo, a cybersecurity firm serving federal, state, and local government agencies as well as commercial clients. The deal expands MCP’s managed cybersecurity services portfolio, strengthens its cyber talent and capabilities, and increases its capacity to secure mission-critical environments and improve operational resiliency.

TA Associates signed a definitive agreement to make a significant growth investment in Veracode, valuing the company at $2.5 billion. Veracode’s current majority investor, Thoma Bravo, will retain a minority position following the transaction, which is expected to close in Q2 2022 subject to customary conditions.

Investcorp Technology Partners (ITP) has acquired a majority stake in HWG s.r.l., an Italian cybersecurity solutions provider headquartered in Verona. HWG’s co-founder and CEO Enrico Orlandi and the other co-founders will continue to lead the business and have retained an ownership stake alongside Investcorp. The investment is the first from Investcorp Technology Partners’ Fund V and is intended to support HWG’s continued growth in core markets and expansion into new verticals.

Darktrace entered into a definitive agreement to acquire 100% of Cybersprint B.V., an attack surface management company. The €47.5 million consideration will be paid approximately 75% in cash and 25% in equity, with expected completion on or around March 1, 2022. The deal expands Darktrace’s cyber AI capabilities and adds an additional European R&D centre in The Hague, Netherlands.

SecurityScorecard has acquired LIFARS, expanding its offerings beyond cybersecurity ratings into digital forensics, incident response, and cyber resiliency services. LIFARS will operate as a new Digital Forensics and Incident Response (DFIR) practice within SecurityScorecard's Professional Services group, with LIFARS CEO Ondrej Krehel leading the practice.

Clearlake Capital Group has completed its acquisition of Quest Software, a global provider of cybersecurity, data intelligence, and IT operations management software. Quest was acquired from Francisco Partners, and CEO Patrick Nichols will continue to lead the company. Financial terms were not disclosed.

Forescout Technologies announced it has acquired CyberMDX, a healthcare cybersecurity provider focused on visibility and threat prevention for medical devices and clinical networks. The deal expands Forescout’s IT/IoT/OT device security capabilities with added Internet of Medical Things (IoMT) expertise to better protect healthcare organizations from cyber threats.

Fishtech Group and Herjavec Group announced a merger to form a combined cybersecurity services provider, backed by funds advised by Apax Partners LLP. The Apax Funds will hold a majority stake in the new entity, while Fishtech founder Gary Fish and Herjavec Group founder Robert Herjavec will retain significant equity and lead the combined company.

Impero Software acquired ContentKeeper to expand its cloud-based, device-agnostic product portfolio, strengthening offerings in web filtering, reporting, and mobile security for schools and other organizations. The deal is intended to broaden Impero’s reach and customer base, particularly in the United States, and accelerate its product roadmap. Financial terms were not disclosed.

Sverica Capital Management LP made a strategic investment in ShadowDragon, a threat intelligence and OSINT software provider. ShadowDragon founder and CEO Daniel Clemens will continue to lead the company, and Sverica representatives Frank Young and Michael Dougherty will join ShadowDragon’s Board of Directors.

Recovery Point Systems, a portfolio company of Abry Partners, acquired Geminare, a Toronto-based resiliency, application and data protection innovator. The acquisition adds Geminare’s Resiliency Management Platform (RMP) to enhance Recovery Point’s disaster recovery, business continuity and DRaaS capabilities across private, public cloud, and hybrid environments.

HelpSystems announced the acquisition of Digital Guardian, a provider of SaaS and managed service-enabled data loss prevention (DLP) solutions for large and mid-sized organizations. The deal expands HelpSystems’ data security portfolio by adding endpoint, network, and cloud DLP capabilities along with data classification and managed services.

HelpSystems announced the acquisition of PhishLabs, a cyber threat intelligence company focused on digital risk protection for brands, employees, and digital assets. PhishLabs’ team and solutions will join and expand HelpSystems’ cybersecurity portfolio, complementing its email security, vulnerability management, and data protection offerings.

Lightyear Capital LLC announced that affiliated investment funds agreed to acquire assets from and partner with Schellman & Company, LLC to form a new venture focused on information technology and cybersecurity compliance services. Following the transaction, Schellman will operate as a licensed CPA firm providing attest services, while a newly formed entity, Schellman Compliance, LLC, will provide non-attest services; financial terms were not disclosed. The deal also recapitalizes the majority ownership interests of founder and CEO Chris Schellman, enabling an earlier exit ahead of his planned 2027 retirement.

Cytracom announced the acquisition of OmniNet to expand into the security and connectivity market. OmniNet’s SD-WAN and cloud security technology will be integrated to accelerate Cytracom’s product roadmap for secure, reliable connectivity for distributed workforces and SMB customers.

Thoma Bravo signed a definitive agreement to make a strategic growth investment in Intel 471, a provider of cyber threat intelligence via its TITAN platform. Intel 471’s co-founders Mark Arena and Jason Passwaters will continue to lead the company and retain significant ownership; financial terms were not disclosed. Antares Capital is providing debt financing for the transaction.

Thoma Bravo completed its acquisition of Proofpoint, a cybersecurity and compliance company, for approximately $12.3 billion in cash. Proofpoint shareholders received $176.00 per share, and the company’s common stock ceased trading and was delisted from Nasdaq following closing.

AML RightSource (AMLRS), a provider of outsourced AML/KYC/BSA compliance solutions backed by Gridiron Capital, acquired QuantaVerse, Inc. QuantaVerse provides an AI- and RPA-enabled financial crime platform that automates financial crime identification and investigation, and the deal is intended to expand AML RightSource’s tech-enabled service offerings.

ivision announced the acquisition and merger of Carve Systems to expand and strengthen its cybersecurity capabilities for clients. Carve Systems will continue operating under the Carve brand as a subsidiary brand within the ivision company, adding security consulting, training, and risk management services to ivision’s portfolio.

OVHcloud announced it has acquired BuyDRM, Inc., a Texas-based company specializing in security technologies and cryptographic systems for digital rights management (DRM) applications. The acquisition includes BuyDRM’s key talent and intellectual property, with the entire team and founders joining OVHcloud. OVHcloud plans to integrate BuyDRM’s security expertise into its cloud and PaaS offerings to accelerate its security roadmap and expand its service portfolio.

Symphony Technology Group (STG) announced that a consortium led by it has completed the acquisition of McAfee's Enterprise business. The acquired business, McAfee Enterprise, will operate as a standalone enterprise cybersecurity company and is expected to be re-branded in the coming months.

Sophos announced it has acquired Braintrace, a privately held company, to enhance Sophos’ Adaptive Cybersecurity Ecosystem with Braintrace’s Network Detection and Response (NDR) technology. Braintrace, headquartered in Salt Lake City, Utah, will integrate its NDR capabilities into Sophos’ Managed Threat Response (MTR), Rapid Response, and Extended Detection and Response (XDR) offerings, with Braintrace staff joining Sophos’ teams.

Audax Private Equity acquired a majority stake in Flashpoint, a provider of actionable threat intelligence and intelligence automation. The investment is intended to support Flashpoint’s continued growth initiatives; financial terms were not disclosed.

Imprivata announced it has acquired Xton Technologies, a provider of privileged access management (PAM) solutions. The deal adds Xton’s Xton Access Manager (XTAM) capabilities to Imprivata’s identity and access management platform, strengthening governance and control for privileged users across healthcare and other regulated enterprises.

Evergreen Services Group entered into a definitive agreement to acquire substantially all operating assets of VirtualArmour, a global managed security services provider (MSSP). Following closing (expected in late Q2 or early Q3 2021), VirtualArmour will continue to operate independently under its existing leadership team led by CEO Russ Armbrust.

LookingGlass Cyber Solutions announced the acquisition of AlphaWave, a cloud-native attack surface management technology company based in Austin, Texas. The deal expands LookingGlass’s existing cyber risk and attack surface management capabilities by adding deeper visibility into cloud and container environments, while giving AlphaWave customers access to LookingGlass’s threat intelligence platform.

Netwrix announced it has acquired New Net Technologies (NNT), a software manufacturer providing change, configuration, vulnerability, and asset management solutions. The deal expands Netwrix’s cybersecurity product portfolio to help customers better identify security gaps and protect against cyber threats. Financial terms were not disclosed.

SecureLink acquired Maize Analytics to strengthen SecureLink’s third-party remote access and security offerings with Maize’s data governance and machine learning capabilities. The combined platform aims to improve security, privacy, and compliance—particularly for regulated industries such as healthcare—by identifying non-compliant or risky system access behavior.

HelpSystems acquired Beyond Security, a provider of cloud-based vulnerability assessment and management software. The acquisition expands HelpSystems' infrastructure protection and cybersecurity portfolio, complementing products such as Digital Defense, Core Security, and Cobalt Strike. KPMG Corporate Finance LLC served as exclusive investment banking advisor to Beyond Security.

HKW acquired CIS Secure Computing, Inc. from Acorn Growth Companies for an undisclosed amount. Headquartered in Ashburn, Virginia, CIS provides secure, customized communications technologies and secure endpoint hardware/software solutions serving government and security-conscious customers.

Hornetsecurity Group, a cloud email security provider, has acquired Zerospam, a Montreal-headquartered email protection specialist, to expand its reach in North America. The deal is supported by Hornetsecurity shareholders PSG and Verdane, and financial terms were not disclosed.

Funds advised by Triton acquired ACRE, an end-to-end electronic security solutions provider headquartered in Dallas with operations in Dublin. Triton will invest alongside ACRE’s current management team, while prior majority investor LLR Partners is exiting its stake. Financial terms were not disclosed.

Idera, Inc. announced the acquisition of PreEmptive Solutions, LLC, a provider of application protection and security tools. PreEmptive will join Idera’s DevOps business unit, expanding Idera’s DevOps security and application resilience offerings for enterprise customers.

IST Research and Two Six Labs were acquired by an affiliate of The Carlyle Group and combined to form Two Six Technologies, Inc., a government technology platform serving U.S. national security customers. The newly formed company will provide cybersecurity and advanced technology solutions to the Intelligence Community, Department of Defense, and other U.S. Government agencies and will be led by CEO Joe Logue.

LogRhythm has acquired MistNet, a cloud-based analytics platform focused on network visibility and threat detection. The deal expands LogRhythm’s threat detection capabilities and accelerates its entry into the XDR market by adding network detection/response, distributed analytics, and AI-driven behavioral and threat modeling. Financial terms were not disclosed.

Alarm.com has acquired Shooter Detection Systems (SDS), a provider of indoor gunshot detection technology, to expand its commercial security solutions portfolio. SDS will operate as a subsidiary of Alarm.com, remain led by its existing management team, and continue supporting current customers and partners while integrating further with the Alarm.com ecosystem.

Thoma Bravo announced a strategic growth investment in Venafi, a provider of machine identity management, valuing the company at $1.15 billion. The investment is intended to accelerate Venafi’s technology innovation and growth as demand for machine identity management rises in cybersecurity. Existing investors TCV and Foundation Capital will remain shareholders.

Imprivata announced the acquisition of FairWarning Technologies, LLC to expand and enhance its digital identity platform for healthcare. The combined offering is intended to streamline clinical access while improving security, identity governance, and patient privacy/data compliance across healthcare organizations.

Kemp Technologies announced the acquisition of Flowmon Networks to combine Kemp’s application delivery and security capabilities with Flowmon’s flow-based network performance monitoring and network detection and response (NDR) solutions. Flowmon’s ML-driven network intelligence and encrypted traffic analysis will enhance network observability, early threat detection, and automated incident response for NetSecOps teams.

ACRE, a global provider of security systems, acquired Razberi Technologies, a video surveillance and cybersecurity-focused platform headquartered in Farmers Branch, Texas. The deal is intended to strengthen ACRE’s video and communications portfolio, including the ComNet business, by adding Razberi’s video infrastructure, cybersecurity, and system health monitoring capabilities.

Imperva, Inc. entered into an agreement to acquire jSonar, a provider of modern database security software. The deal aims to combine jSonar’s database security and analytics/SOAR capabilities with Imperva’s application and data security offerings to deliver integrated data security across on-premises and cloud environments. The transaction is expected to close in mid-October 2020, subject to customary closing conditions and regulatory clearance.

CyberRisk Alliance (CRA) has acquired Security Weekly, a cybersecurity-focused podcast and video network. Security Weekly was acquired from Defensive Intuition, LLC and its founders Paul Asadoorian and Matt Alderman, who will join CRA and continue leading and hosting Security Weekly as part of CRA’s growing portfolio of cybersecurity media and events brands.