Cybersecurity Acquisitions in 2026

Arctic Wolf has acquired Sevco Security, a Visionary-ranked exposure assessment platform, to integrate Sevco’s asset intelligence and exposure assessment capabilities into the Arctic Wolf Aurora Platform. The acquisition expands Arctic Wolf’s proactive security and exposure management capabilities for customers and MSPs by unifying asset intelligence, vulnerability context, and security control coverage.

Markon, a Sterling Investment Partners portfolio company, has acquired Millennium Corporation to expand full‑spectrum cyber capabilities across defense, intelligence, and federal civilian markets. The deal combines Markon’s enterprise delivery and program execution strengths with Millennium’s adversarial threat emulation, cyber operations, testing, training, and software capabilities as an add‑on to Markon’s platform.

Palo Alto Networks has completed its acquisition of CyberArk, integrating CyberArk's identity security platform into Palo Alto's broader security ecosystem. Under the deal, CyberArk shareholders will receive $45 in cash and 2.2005 shares of Palo Alto Networks common stock per CyberArk share; the acquisition is intended to make identity security a core pillar across human, machine, and AI/agent identities.

ITC Secure and IronNet have combined to form Collective Defence, a Luxembourg-headquartered cybersecurity company focused on protecting critical infrastructure from state-sponsored and hybrid threats. The new company brings together ITC Secure's managed security and advisory capabilities with IronNet's collective defence and network detection technology, and will leverage a strategic partnership with Microsoft to embed AI across its security operations.

Endor Labs, the AI-native application security platform, has acquired Autonomous Plane, a cloud-native application security startup founded by Kyle Quest, to add full‑stack reachability from source code through container images. The deal expands Endor Labs' platform capabilities for container reachability analysis, improving vulnerability prioritization and reducing false positives for enterprise and regulated customers.

Proofpoint, Inc. has acquired Acuvity, an AI security and governance platform provider, to enhance its capabilities for securing AI agents, copilots, and model-connected applications across the enterprise. The acquisition adds AI-native visibility, governance and runtime protection to Proofpoint’s human- and agent-centric cybersecurity platform, enabling broader protection of people, data and AI-driven workflows.

Logicalis US has acquired Maple Woods Enterprises to integrate its Overwatch cybersecurity and compliance capabilities into Logicalis’ managed security services. Maple Woods’ founder Rob Edwards will join Logicalis US as Vice President, Security and Innovation as the combined team expands Overwatch into additional verticals including healthcare and SLED while preserving its defense-grade compliance rigor.

Entech, a Prospect Partners–backed Florida managed technology and cybersecurity platform, has acquired Coral Springs–based C2 Computer Services, Inc., a managed cybersecurity and IT services provider serving South Florida. The deal deepens Entech’s East Coast presence, broadens its cybersecurity capabilities, and brings additional local support resources to clients across Florida.

Woven Solutions, a Reston, Virginia-based provider of AI-enabled mission software for national security customers, has acquired Apira Technologies, a developer of AI, computer vision and synthetic media detection tools used in sensitive cyber and information operations. The deal expands Woven’s cyber and information operations capabilities, adds engineering and R&D talent, and increases access to end customers and prime contracts; it is Woven’s second acquisition since receiving a strategic investment from Falfurrias Management Partners in August 2025.

Semperis, the identity-driven cyber resilience and crisis management company, has acquired MightyID, an identity resilience specialist for cloud identity providers Okta and Ping. The acquisition expands Semperis' platform to provide backup, restore, migration, failover and faster recovery across hybrid and multi-cloud identity environments.

LevelBlue has acquired Fortra’s Alert Logic managed services business—covering Alert Logic’s MDR, XDR, and WAF managed services—under a broader long-term strategic partnership that makes Fortra a leading technology partner for LevelBlue. The deal expands LevelBlue’s global managed detection and response platform and provides Alert Logic customers access to a larger global footprint and broader threat telemetry; Santander and Stephens served as financial advisors to LevelBlue and Fortra/Alert Logic, respectively.

CyberMaxx, a Linthicum Heights, Maryland–based managed detection and response provider, has acquired Corvid Cyberdefense, a Mooresville, North Carolina–based email security services provider. The acquisition adds Corvid’s managed email security and Elastic SIEM capabilities, more than 130 customers, and strengthens CyberMaxx’s channel-focused, tech-enabled security offering.

Mitsubishi Electric Corporation completed its acquisition of all outstanding shares of Nozomi Networks Inc., making Nozomi a wholly owned subsidiary effective January 28, 2026. Nozomi Networks will operate as an independent subsidiary out of San Francisco and continue delivering vendor-agnostic OT/IoT cybersecurity solutions; the company reported over $100M in 2025 revenue and ~336 employees as of December 2025.

Radware Ltd. (NASDAQ: RDWR) has completed the acquisition of Pynt, an API security testing company, to add pre-production API security testing to its API security portfolio. The deal brings Pynt's founders and key employees into Radware and extends Radware's capability to deliver continuous, full-lifecycle API security from development through production.

FGS Global launched a new AI Advisory practice and acquired Memetica, a specialist threat intelligence consultancy founded in 2019 by Ben Decker. The purchase integrates Memetica’s AI-driven threat detection and dark‑web monitoring capabilities into FGS’s global AI and Innovation group to strengthen early‑warning, tipping‑point analysis and reputational defense offerings.

Integrity360 has acquired Calgary-based cybersecurity services provider Advantus360 to establish the group’s first North American hub. The deal — terms undisclosed — gives Integrity360 an operating base in Canada and will be used to develop a Calgary Security Operations Centre and expand the group’s managed and professional cyber services across Canada and the US.

Sole Source Capital LLC has acquired Brite, a cybersecurity and managed IT services provider headquartered in Victor, New York, marking Sole Source's first platform investment from SSC Partners Fund III. The deal positions Brite as a buy-and-build platform to pursue consolidation in the fragmented cybersecurity managed services market; financial terms were not disclosed and Brite's existing management team will remain in place.

Ping Identity has completed its acquisition of Keyless, integrating Keyless' zero-knowledge biometric authentication technology into Ping's identity platform to strengthen defenses against AI-driven identity attacks and enable device-independent, privacy-preserving biometric verification. The acquisition expands Ping's capabilities for customer, workforce and B2B identity use cases; financial terms were not disclosed.

ThreatModeler has acquired IriusRisk to combine two enterprise threat-modeling platforms, broaden global scale, and accelerate product development. The combined business — majority owned by Invictus Growth Partners, with Paladin Capital Group remaining a shareholder — aims to create the industry’s largest proprietary threat-model dataset and deepen secure-by-design support for security and development teams.

London-headquartered Axiom GRC has acquired AssurancePoint, an Atlanta-based SOC and ISO audit and advisory firm, to strengthen its North American cyber compliance and assurance capabilities. AssurancePoint will integrate with Axiom's U.S. platform IS Partners to expand audit capacity, scale recurring audit delivery, and deepen the company's U.S. delivery footprint.

Gryphon Investors has completed a majority growth recapitalization of Fortreum, a Lansdowne, Virginia-based cybersecurity services firm specializing in compliance, audit, and technical testing including FedRAMP, CMMC, ISO, PCI, and SOC. The investment will fund expansion of Fortreum's offerings and accelerate development and adoption of its XRAMP continuous validation platform and AI-enabled capabilities; company founders will retain a significant equity stake. Financial terms were not disclosed.