Tracked deals
1384
1384 tracked deals across 2003-2026.
Tracked deals
1384
1384 tracked deals across 2003-2026.
Buyer mix
Strategic-led
1124 strategic · 504 pe
Top trend
Volume peaked in 2026
231 tracked deals announced in 2026.
Primary Insight
Build a buyer list for your Cybersecurity deal
Find buyers actively acquiring cybersecurity companies.
Find buyers like these for your dealBuyer Snapshot
Illustrative buyers pulled from tracked transactions on this page. This table is capped and intentionally non-exhaustive.
| Buyer | # Deals | Focus | Type |
|---|---|---|---|
| Thoma Bravo | 15 | Private equity firm focused on growth-oriented software a... | PE |
| Palo Alto Networks | 13 | Global cybersecurity company providing network, cloud and... | Strategic |
| TA Associates | 13 | Global growth private equity firm investing across techno... | PE |
| HelpSystems | 11 | Software company providing cybersecurity and IT operation... | Strategic (PE-backed) |
| Clearlake Capital Group, L.P. | 10 | Sector-focused private investment firm providing private ... | PE |
| Keensight Capital | 9 | European growth buyout / private equity firm focused on t... | PE |
| Accenture | 8 | Global professional services and consulting firm providin... | Strategic |
| Cisco | 8 | Global networking, security and collaboration technology ... | Strategic |
| Crosspoint Capital Partners | 8 | Private equity firm focused on cybersecurity, privacy and... | PE |
| Francisco Partners | 8 | Global private investment firm specializing in technology... | PE |
Last 10 years
Supporting Data
Proofpoint agreed to acquire Varonis in an all-cash transaction valued at approximately $6.3 billion, with Varonis shareholders to receive $49.75 per share. The combination is intended to unite the companies’ cybersecurity capabilities, particularly in data, identity, communications, and AI security; closing is expected in the first half of 2027.
IonQ entered into a definitive agreement to acquire Elisity in an all-stock transaction valued at up to $1.3 billion, including up to $150 million in potential earnout consideration. The acquisition combines Elisity’s Zero Trust security platform with IonQ’s post-quantum cryptography and quantum key distribution capabilities to expand cybersecurity offerings for enterprise and government customers; it is expected to close in the fourth quarter of 2026, subject to customary conditions and regulatory approval.
Spring Labs Holdings, Inc. announced the acquisition of Winnow Solutions, LLC, a regulatory compliance technology platform built by attorneys. Winnow’s structured library of laws and regulations will become a core component of Spring Labs’ SpringGRC platform, connecting regulatory requirements directly to compliance workflows to help financial institutions keep procedures up to date as rules change.
Serval acquired Ensignia, a software supply chain security startup, and appointed Ensignia founder and CEO Sam Stewart as its Head of Security. The acquisition adds security expertise and capabilities to support Serval’s AI automation platform and its work with enterprise customers.
Basware completed its acquisition of Trustpair, bringing invoice and payment assurance into a single end-to-end lifecycle. Trustpair continues operating independently while expanding integrations across ERP, treasury, procure-to-pay and payment platforms.
SGS has completed the acquisition of a majority stake in Prescient Security, a US-based provider of information compliance and enterprise cybersecurity services. The deal expands SGS’s Digital Trust platform by adding services such as security certification, penetration testing, and compliance automation workflows.
TRG, a managed services provider for enterprise endpoints and a portfolio company of Gemspring Capital, acquired Fentron, a cybersecurity and advisory firm based in Westerville, Ohio. Fentron’s team is joining Inversion6, TRG’s dedicated cybersecurity division, to add complementary capabilities and senior engineering talent across the enterprise endpoint lifecycle. Financial terms were not disclosed.
Project Eleven announced its acquisition of Riva Labs to expand its post-quantum security expertise across signatures, wallets, MPC, and account abstraction. The deal brings Riva’s technology and intellectual property developed through work on Ethereum and other public blockchains, strengthening Project Eleven’s post-quantum cryptography and blockchain infrastructure capabilities.
Pye-Barker Fire & Safety acquired Union AlarmTronic, a security alarm company based in Springfield, New Jersey. The deal is intended to expand Pye-Barker’s full-service security capacity and deepen its presence in New Jersey. Union AlarmTronic’s team will continue serving customers in the state.
SoundThinking has entered into a definitive agreement to be acquired by Transom Capital Group, taking the public safety technology company private. The deal contemplates a tender offer at $8 per share plus a non-transferable contingent value right that could add up to $3 per share based on 2027 revenue milestones tied to ShotSpotter and SafePointe.
Inverness Graham announced the majority recapitalization of EasyLlama, a governance, risk, and compliance (GRC) platform purpose-built for small and medium-sized businesses. The investment aims to accelerate EasyLlama’s growth by deepening its GRC software capabilities, expanding its content ecosystem, and scaling via strategic acquisitions.
REDLattice entered into a definitive agreement to become a publicly traded company via a business combination with Bold Eagle Acquisition Corp, valuing the company at a $1.25 billion pre-money enterprise value. The deal is expected to provide REDLattice with up to $610 million in gross proceeds, including committed convertible notes and a common stock PIPE, with closing targeted for around year-end 2026.
The Visualize Group completed its previously announced acquisition of eCOGRA after receiving customary regulatory approvals and clearances. With eCOGRA joining BMM Testlabs, the combined platform positions Visualize to support suppliers entering newly regulated gaming markets worldwide.
Epiq acquired Canopy, a data breach response technology company, to expand its cybersecurity capabilities. The deal brings Canopy’s incident-response and breach-exposure analysis software—including its agentic AI “Auto Review”—into Epiq’s cyber incident response services and Epiq AI platform. Financial terms were not disclosed.
Ondas acquired Ottopia Defense to strengthen remote operation and resilient communications for unmanned systems. The acquisition is part of a combined set of three deals with a $56 million initial aggregate purchase price and potential earnouts up to $32 million through 2028.
Ondas acquired Caribou Labs to add GPS-independent positioning, navigation, timing, identification, and resilient communications for contested environments. The acquisition is part of a combined transaction package with a $56 million initial aggregate purchase price and potential earnouts up to $32 million through 2028.
Ondas acquired Insignito as part of a broader transaction to expand its autonomous defense technology platform. The deal includes an initial purchase price of $56 million in aggregate across the three acquisitions, plus potential earnout payments up to $32 million based on performance milestones through 2028.
Omada acquired EmpowerID to expand identity governance and administration (IGA) capabilities for AI agent governance. The deal brings EmpowerID’s runtime agent governance and real-time security/authorization to Omada’s platform, enabling enterprises to control AI agents’ actions and maintain audit-ready compliance evidence.
Nomios, a pan-European cybersecurity services specialist, acquired Portuguese provider Orbcom, establishing its first presence in Portugal and expanding its Southern Europe footprint. The acquisition was completed in September 2026 and adds a business with about €15 million in annual revenue and ~80 employees, serving 250+ customers. Financial terms were not disclosed.
A-LIGN, a cybersecurity compliance provider, announced its acquisition of AssurePoint, an Australian cloud security assessment firm specializing in IRAP assessments. The deal expands A-LIGN’s service portfolio to include IRAP and marks the firm’s formal entry into the Australian market.
Rajant Corporation has acquired The Bellwether Group to combine Rajant’s communications, edge computing, and autonomous systems technology with Bellwether’s national-security expertise and applied research capabilities. The deal is intended to help Rajant deliver operational solutions for defense and national-security customers requiring highly classified clearances and mission experience.
Carlyle and CVC DIF agreed to acquire BauWatch from Haniel as the European remote video surveillance company continues expanding across construction, infrastructure, and renewable energy markets. Haniel will retain a 10% minority stake, and the transaction is expected to close in Q1 2027 subject to regulatory approvals.
CyberMaxx acquired Avertium to combine CyberMaxx’s managed detection and response (MDR) platform with Avertium’s Microsoft security, governance, risk and compliance (GRC), and offensive cybersecurity capabilities. The combined offering aims to support midsize customers across security maturity stages using Avertium’s “Assess, Design, Protect” approach.
S&P Global has entered into an agreement to acquire OpenZeppelin, a blockchain and smart contract security company. The deal aims to expand S&P Global’s risk-assessment capabilities into the onchain technology-risk layer while giving OpenZeppelin access to S&P Global’s institutional customer base and distribution.
Quorum Cyber signed a definitive agreement to acquire Ontinue, a managed extended detection and response (MXDR) provider with an Agentic SOC. The proposed combination is intended to expand Quorum Cyber’s Microsoft-first, AI-enabled cyber resilience and 24/7 threat detection capabilities and extend reach across North America, the UK, and the DACH region. Financial terms were not disclosed, and closing is expected after customary conditions and approvals.
Graham Partners, a private investment firm focused on advanced manufacturing and technology-enabled services, acquired Immix, a provider of remote video monitoring (RVM) workflow solutions. Immix’s platform integrates video, audio, access control, sensors, and AI analytics to help monitoring centers and enterprises manage real-time security monitoring and response.
eSentire announced it has acquired a stealth-mode AI security startup and incorporated its technology into the eSentire Atlas Platform as Atlas AIDR. The acquired module is designed to provide real-time AI observability and inline security control, including full AI conversation timelines, tool-call inputs/outputs, token and cost accounting, and related security events.
Optima Partners announced the acquisition of Trifecta Advisory Group, a specialist regulatory advisory firm based in Abu Dhabi Global Market (ADGM). The deal expands Optima’s on-the-ground capabilities and regulatory consulting presence across the UAE, positioning Optima as one of the largest regulatory consulting firms in the region.
Ubicquia completed the acquisition of Databuoy Corporation to expand its UbiShield public safety platform and services. Databuoy’s Shotpoint multi-threat sensor network (gunshot and drone detection) and Geofob mobile panic-button solution will be integrated into Ubicquia and offered to municipal, utility, retail, airport, stadium, and K-12 school customers.
SecureSky acquired Soveren, adding real-time Data Security Posture Management (DSPM) capabilities to its exposure management and AI-powered Managed Detection and Response (MDR) platform. Soveren’s technology provides continuous sensitive-data discovery, classification, and protection across cloud-native and on-premises environments, including inspection of encrypted TLS traffic at scale.
Surfshark, a cybersecurity and digital privacy company, has completed the acquisition of the majority stake of Optery, a US-based data removal provider. Optery will continue operating as a standalone company, integrating its data-broker and people-search deletion technology into Surfshark’s privacy ecosystem.
Concentrix Corporation announced it will acquire CastleHill Managed Risk Solutions, a provider of Governance, Risk and Compliance (GRC), Third-Party Risk Management (TPRM), and AI governance solutions. The acquisition is intended to expand Concentrix’s enterprise risk and compliance capabilities, particularly for financial crime, cybersecurity, and governance and risk operations.
Everbridge acquired Open Measures to expand its open-source risk intelligence capabilities. The deal adds technology that collects and analyzes billions of publicly available signals across more than 45 digital sources to help organizations detect emerging threats earlier and connect digital signals to people, locations, assets, and operations.
Pistachio acquired the technology behind Hugin.io to expand its human risk management platform into compliance management. The company plans to use the acquired technology to reduce the manual burden of compliance (e.g., evidence collection, audit readiness, and documentation) and make compliance a more continuous workflow within its platform.
Iris Powered by Generali completed a management-led buyout from Redion Group and transitioned to operate as an independent identity and cyber protection company under the new brand Iris OnWatch. The company will continue delivering its identity and cyber protection services to millions of individuals via enterprise and financial institution clients, supported by growth investors NewSpring Capital and Signal Cove Capital.
NetSPI and Synack have entered into a definitive agreement to merge and create a combined offensive cybersecurity platform with more than $200 million in revenue. The merged company pairs NetSPI’s penetration testing capabilities with Synack’s continuous security validation platform and network of vetted security researchers, accelerating security testing with AI while retaining human expertise.
Tusker announced the acquisition of Fortress SRM, a Cleveland-based cybersecurity services provider. The deal adds nearly 50 cybersecurity professionals and expands Tusker’s capabilities, including a 24/7 Security Operations Center and services such as virtual CISO, managed security, incident response, and digital forensics.
Rank One Computing Corporation d/b/a ROC has completed its previously announced acquisition of Zuccaro Technical Consulting LLC (ZTC). The deal expands ROC’s Vision AI platform (ROC Evidence) by adding ZTC’s digital forensics capabilities and associated federal customer relationships, enabling a broader end-to-end investigative intelligence offering.
A-LIGN, a cybersecurity compliance provider, announced its acquisition of Pathfynder, a specialized offensive and defensive cybersecurity firm. The deal expands A-LIGN’s service offerings to include advanced penetration testing, red teaming, adversary emulation, forensics, and incident response for enterprise customers with complex security needs.
Palo Alto Networks acquired Console, an AI-native platform for building agentic workflows across enterprise operations. The acquisition is intended to deepen Console’s agentic capabilities in Palo Alto Networks’ Cortex security platform to help teams investigate signals, prioritize work, and take action through AI-powered workflows.
Carrick Capital Partners closed a single-asset continuation vehicle for identity security company Saviynt, committing $255 million of new capital (within roughly $600 million of total capital commitments). The structure gives existing limited partners the option to roll into the continuation vehicle or take liquidity via a tender offer for Saviynt employees, alongside ongoing Series B financing activity.
Socure confirmed it acquired agentic AI fraud investigation and compliance operations platform Fravity. The acquisition will integrate Fravity’s “RiskOS_Agents” capabilities into Socure’s RiskOS platform to automate fraud, risk, and compliance workflows such as watchlist screening and KYB checks.
Basware signed a binding agreement to acquire Trustpair, extending Basware’s invoice lifecycle management into payment fraud prevention. The combined solution is intended to provide end-to-end assurance from invoice legitimacy through confirmation that payments reach the intended supplier account.
Volaris Group announced the acquisition of LoginRadius Global, a Canadian provider of enterprise customer identity and access management (CIAM) solutions. The purchase is intended to expand Volaris’s platform capabilities and market reach in the identity and security space, and LoginRadius will continue to operate independently within Volaris’s Security Portfolio.
SCP Standard Capital Partners AG agreed to acquire all shares in Vanea Technologies GmbH and Nocturne Technologies GmbH. Vanea develops defense solutions for autonomous warfare, while Nocturne (Nocturne Defence), based in Osnabrück, focuses on civil and military counter-UAS (drone defense) systems.
Brinqa announced it has acquired PlexTrac, adding offensive security validation, workflow, and reporting capabilities to Brinqa’s exposure management platform. The combined platform is positioned to close the Continuous Threat Exposure Management (CTEM) loop by verifying that remediation fixes actually worked and held, and by flowing validated exploit and remediation results into Brinqa’s data layer.
Queue-it entered a definitive agreement for THL Partners to make a majority investment in the company. The partnership is intended to accelerate product innovation and expand Queue-it’s global reach for its online traffic orchestration platform.
FORT Robotics entered into a definitive business combination with Newbury Street II Acquisition Corp to become a publicly traded company, valuing the combined entity at an implied pro-forma enterprise value of $556.6 million. The deal is expected to close in Q4 2026 and is designed to accelerate product development across safety intelligence, observability, and cybersecurity, as well as expand go-to-market and targeted acquisitions.
CesiumAstro Inc., a space communications and ISR systems company, announced the acquisition of Jariet Technologies, a fabless mmWave RF System-on-Chip semiconductor company focused on SATCOM, electronic warfare, and radar. The deal is intended to bring semiconductor design in-house to increase control over the RF signal chain and accelerate development of next-generation phased array satellite solutions.
NetApp acquired JetStream Software, a provider of VMware disaster recovery and migration technology. The deal is intended to expand NetApp’s cyber resilience, data protection, and cloud migration capabilities, enabling customers to start with disaster recovery in cloud environments and evolve toward production migration over time.
Full Export
Get the full acquisitions list for this page as CSV + XLSX.
Find buyers actively acquiring cybersecurity companies.
Recent deals highlight managed detection and response (MXDR), real-time DSPM, exposure/risk intelligence, privacy and data removal, compliance enablement, and offensive security testing/validation.
The page features strategic operators (for example, S&P Global, Palo Alto Networks, Surfshark, SecureSky) as well as cybersecurity platforms and service providers, including sponsor-supported activity such as KKR backing the NetSPI/Synack merger.
Yes. For example, Quorum Cyber’s proposed acquisition of Ontinue is framed around 24/7 threat detection, and SecureSky’s acquisition of Soveren focuses on real-time DSPM with continuous visibility into sensitive data flows.
Yes. Pistachio’s acquisition of the technology behind Hugin.io is intended to expand a human risk platform into compliance management by reducing manual evidence collection and audit readiness work.