Cybersecurity Acquisitions in Canada

Integrity360 has acquired Calgary-based cybersecurity services provider Advantus360 to establish the group’s first North American hub. The deal — terms undisclosed — gives Integrity360 an operating base in Canada and will be used to develop a Calgary Security Operations Centre and expand the group’s managed and professional cyber services across Canada and the US.

Gentex Corporation has acquired Toronto-based biometric authentication provider BioConnect and will integrate its enterprise-grade software into a newly formed Security & Access Control commercial division. The acquisition (terms not disclosed) expands Gentex's biometrics and identity-assurance capabilities and will be combined with its existing hardware assets such as EyeLock to pursue high-security enterprise and critical-infrastructure customers.

SecurityScorecard has completed the acquisition of HyperComply, integrating HyperComply's AI-driven questionnaire automation and compliance management with SecurityScorecard's continuous security ratings and supply chain visibility. The combined offering aims to automate vendor security questionnaires, provide continuous supplier assurance across supply chains, and accelerate vendor onboarding while supporting global compliance mandates.

Accenture has acquired IAMConcepts, a Toronto-based identity and access management (IAM) services firm, to strengthen its cybersecurity and IAM capabilities in Canada. The acquisition brings specialized IAM talent and expands Accenture's ability to deliver IAM solutions across critical infrastructure industries such as financial services, utilities, mining and transportation; terms were not disclosed.

SDG has acquired Synergetika, a Toronto-based Privileged Access Management (PAM) consultancy and systems integrator, to deepen its identity and access management delivery capabilities. The deal brings Synergetika’s specialized PAM advisory and implementation talent into SDG’s identity and access management practice; financial terms were not disclosed.

Compugen Inc., Canada’s largest privately owned technology provider, has acquired SynerSolutions Technologies Inc., a cybersecurity firm focused on defence and federal government work. The acquisition strengthens Compugen’s defence and security cybersecurity capabilities and allows SynerSolutions to scale its services nationally using Compugen’s resources.

CyberGuard Advantage, a portfolio company of Atlantic Street Capital, has acquired Control Gap, a Canadian provider of PCI compliance, cyber risk, and offensive security services. The deal expands CyberGuard Advantage’s PCI and offensive security capabilities and increases its presence in Canada to offer a more comprehensive IT security and compliance suite.

Exiger, a supply chain and third-party risk AI company, has acquired aDolus Technology Inc., a software supply chain risk visibility platform that generates SBOMs from binaries and analyzes firmware for provenance. The acquisition expands Exiger's Ion Channel platform to provide deeper visibility into firmware, OT and IoT software, strengthening capabilities for customers in energy, telecom, manufacturing and defense.

Finite State, a software risk management leader, has acquired MergeBase, a provider of software supply chain security and runtime SCA capabilities. The acquisition combines Finite State's binary-analysis strengths with MergeBase's source-code and runtime SCA to deliver end-to-end application security across the software development lifecycle.

Cyderes has acquired Ipseity Security, a Toronto-based identity and access management (IAM) specialist; financial terms were not disclosed. The deal expands Cyderes' IAM capabilities and global engineering bench, combining Ipseity's team with Cyderes' existing IAM practice to deliver expanded cloud identity, access governance, and privileged access management services.

Calgary-based Jot Digital has acquired Keep Secure, a technology firm specializing in cloud infrastructure and cybersecurity. The acquisition strengthens Jot Digital’s security and cloud capabilities, enabling expanded service offerings and accelerated innovation for its clients.

WELL Health Technologies’ cybersecurity unit Cycura completed tuck-in acquisitions of Seekintoo Ltd. and Proack Security Inc. to expand its managed detection, SOC and offensive security capabilities. The deals strengthen Cycura’s ability to protect patient health information and bolster its services across healthcare, government and enterprise customers in North America.

Thrive, a U.S.-based managed services provider, has acquired Storagepipe, a Toronto-based cloud, data protection and cybersecurity managed services firm. The deal expands Thrive’s international footprint—particularly in Canada’s financial-services hub of Toronto—and brings Storagepipe’s BaaS/DRaaS and Microsoft/Veeam-aligned capabilities into Thrive’s NextGen managed services portfolio.

INSA Corp., a Canadian IT network security reseller, has acquired Integra Data Systems Corp., a Greater Toronto Area technology solutions provider. Terms were not disclosed; the deal expands INSA's geographic footprint and technical capabilities across government, education and enterprise customers in Ontario.

Thoma Bravo, through a newly formed purchaser Morpheus Purchaser Inc., has signed a definitive arrangement agreement to acquire Magnet Forensics Inc. in an all-cash transaction valuing the company at approximately CA$1.8 billion. The deal (CA$44.25 per SV share for most holders) will take Magnet private and Thoma Bravo intends to combine Magnet with Grayshift to create an end-to-end digital investigations platform; certain founders/major shareholders will rollover a portion of their equity.

Applus+ has acquired Lightship Security, a North American cybersecurity testing and product‑certification laboratory based in Ottawa, Canada. The acquisition expands Applus+ Laboratories' product certification capabilities—adding North American accreditations and strengthening its global cybersecurity certification offering for connected products and critical sectors.

Edison Partners led a $30 million funding round in Ottawa-based cyber security company Field Effect, contributing $20 million with other strategic investors providing the remaining $10 million. The growth capital will be used to scale sales and marketing (with a focus on channel and brand), accelerate product and service development, and expand commercial operations including e-commerce.

Volaris Group has acquired Hitachi ID Systems, Inc., which will operate as Bravura Security and continue to deliver identity, privileged access, password and passwordless management solutions. The acquisition gives Volaris a foothold in the identity and privileged access management market and supports its strategy to build a broader cybersecurity portfolio.

Flashpoint has acquired Victoria, British Columbia–based Echosec Systems to expand its open-source intelligence (OSINT) and geospatial/social media capabilities. The deal integrates Echosec's social media collections and geospatial insights into Flashpoint's intelligence platform to enhance offerings for national security, public safety, and commercial security teams.

Audax Private Equity has entered into a definitive agreement to make a strategic growth investment in BlueCat Networks, acquiring a controlling stake. Financial terms were not disclosed; Madison Dearborn Partners will fully realize its investment. Audax plans to use its Buy & Build strategy to expand BlueCat’s offerings and accelerate growth.

lowRISC C.I.C., the open-source silicon design organization behind the OpenTitan project, has acquired NewAE Technology, Inc., maker of the ChipWhisperer hardware security analysis toolchain. The acquisition brings NewAE's side-channel power analysis and fault-injection tools into the OpenTitan ecosystem to strengthen silicon root-of-trust security testing and open-source hardware hardening.

Innominds has acquired Nymi, a Toronto-based provider of a passwordless connected worker platform and wearable authentication (the Nymi Band). Nymi will operate as a wholly owned, independent subsidiary out of Toronto; the company serves large enterprises across 15 countries, including major pharmaceutical, life sciences, healthcare, manufacturing and financial services customers.

HelpSystems (now rebranded as Fortra) has acquired Terranova Security, a global provider of phishing simulation and security awareness training available in 40+ languages. The acquisition adds localized employee security training and phishing simulation capabilities to HelpSystems/Fortra's cybersecurity suite to better complement its email security offerings and broaden its security training capabilities globally.

Kroll has acquired Resolver, a provider of cloud-based Risk Intelligence software, to expand its suite of risk, governance and security technologies. Resolver CEO Will Anderson will join Kroll’s digital services leadership team as the companies integrate Resolver’s Risk Intelligence platform with Kroll’s expert-led risk and governance services to build an end-to-end risk platform.

Avast has agreed to acquire SecureKey Technologies, a Canada-based provider of digital identity and authentication solutions, to expand its Identity product and services portfolio. The acquisition (terms undisclosed) will bring SecureKey's products such as Verified.Me and Government Sign-In into Avast's digital trust offerings; the deal was expected to close in early April 2022.

Kroll has acquired Security Compass Advisory, a Canada-headquartered cybersecurity consulting firm, to expand its red team, penetration testing and cloud security capabilities. Key Security Compass Advisory leaders will join Kroll's cyber risk practice, and the deal strengthens Kroll's managed security and assessment offerings across North America.

Herjavec Group, the global cybersecurity firm led by Robert Herjavec, has acquired SEGMENTECH, a North American cybersecurity services specialist focused on Identity and Privileged Access Management (IAM/PAM). The acquisition expands Herjavec Group's IAM and PAM capabilities and adds SEGMENTECH's CyberArk-focused implementation and DevSecOps expertise to its service offering.

OneTrust signed a definitive agreement to acquire Tugboat Logic, a security assurance and certification automation platform. The acquisition brings Tugboat Logic’s automated InfoSec certification capabilities, ~800 customers, and ~140 employees into OneTrust to expand its security assurance and GRC offering and accelerate global growth.

PwC Canada has acquired Avaleris Inc., an Ottawa-based specialist in Microsoft identity, security and cloud services. The acquisition brings over 30 cybersecurity professionals and expands PwC Canada’s Microsoft-focused cybersecurity and cloud capabilities to better serve enterprise and government clients.

Vistara Growth has provided D3 Security with $10 million in growth equity, supplemented by a $5 million credit facility, to accelerate product development, scale operations, and expand globally. As part of the investment, Vistara directors John O'Donoghue and Randy Garg will join D3 Security's board; D3 is a SOAR leader serving enterprises, MSSPs and MDR providers.

CIVC Partners has made a growth equity investment in KeyData Associates to support the Toronto-headquartered identity security specialist’s expansion across adjacent cybersecurity services and to fund strategic add-on acquisitions. KeyData’s founder and CEO Rosa Caputo remains a significant stakeholder and will continue to lead the business as the firm scales its advisory, systems-integration and managed identity services across North America.

Hornetsecurity Group has acquired Zerospam, a Montreal-based cloud email protection specialist, to accelerate its North American expansion and broaden its email security and compliance offerings. The transaction is supported by Hornetsecurity shareholders PSG and Verdane; financial terms were not disclosed.

GeoComply Solutions Inc., a Vancouver-based leader in geolocation and compliance technology, received a minority growth investment led by funds managed by Blackstone Growth and Atairos. The capital will support GeoComply's continued expansion in core markets and accelerate entry into new verticals such as broadcasting and financial services.

Funds advised by Apax Partners signed a definitive agreement to acquire a majority stake in Herjavec Group, a global managed security services provider. Founder and CEO Robert Herjavec will remain a significant stakeholder and CEO; financial terms were not disclosed. Apax said it will support international expansion, add security and identity resources, and advance HG's proprietary platforms.

Atos has signed an agreement to acquire In Fidem, a Montreal-based cybersecurity consulting firm, to reinforce and expand its cybersecurity capabilities in North America. In Fidem, founded in 2005, brings a network of more than 100 specialists with expertise in cloud security, digital identity, risk management, security operations and digital forensics; the transaction was expected to close in Q1 2021.

Fortra (formerly HelpSystems) has acquired FileCatalyst, a Canada-based leader in accelerated enterprise file transfer, to expand its managed file transfer, cybersecurity and automation portfolio. The acquisition brings FileCatalyst's high-speed, secure file-transfer technology and industry expertise (notably in media and broadcast) into Fortra's suite of cybersecurity and automation solutions.

HelpSystems announced the acquisition of data classification specialists Titus and Boldon James to expand its data security portfolio. The deal brings both companies' classification and protection technologies into HelpSystems' security suite to strengthen capability coverage across on‑premise and cloud environments and support regulatory compliance needs.

StorMagic acquired KeyNexus, a Victoria, British Columbia–based developer of encryption key management solutions, and integrated its technology into StorMagic’s newly launched SvKMS key management product. The acquisition broadens StorMagic’s portfolio from edge storage into security, doubling its addressable market and bringing KeyNexus founder Jeff MacMillan into StorMagic as CTO.

ActZero, an AI-driven cybersecurity firm based in Palo Alto, has acquired Toronto-based Managed Detection and Response (MDR) provider IntelliGO Networks. IntelliGO will continue to operate independently while combining its MDR platform and client relationships with ActZero's AI/ML capabilities to build a unified, AI-driven managed security services platform; terms were not disclosed.

IPKeys Power Partners has acquired Ontario-based N-Dimension Solutions, a managed detection and remediation (MDR) provider serving utilities, and will integrate N-Dimension into its IPKeys Power Partners platform. The transaction also included an equity investment in IPKeys from EnerTech Capital to support growth and strategic expansion of IPKeys' Cyber Lab as a Service offering.

Funds managed by Blackstone Tactical Opportunities acquired a majority stake in TITUS, an Ottawa-based provider of data classification and categorization solutions; terms were not disclosed. Blackstone said the investment will help TITUS accelerate its product innovation and expand geographic reach as the company — which serves millions of users and over 950 enterprise customers — scales globally.

Imperva, Inc. acquired the data security assets of Camouflage Software, a St. John's–based data masking vendor, and hired nearly all of Camouflage's employees. The acquisition integrates Camouflage’s data masking capabilities into Imperva’s portfolio to enhance data protection, compliance and breach-mitigation functionality for enterprise customers.

Canadian managed security services provider Above Security acquired Seccuris, an information assurance integrator and MSSP headquartered in Winnipeg, Manitoba. The acquisition expands Above Security’s domestic capabilities and coast-to-coast SOC coverage in Canada, creating a larger pure‑play MSSP with wider service offerings and over 130 combined employees.

Trend Micro has signed an agreement to acquire Third Brigade, a privately held security and compliance software company, to bolster its dynamic datacenter and cloud security offerings. The acquisition will allow Trend Micro to integrate Third Brigade's host intrusion defense and compliance capabilities into its product portfolio and establish Trend Micro Canada Technologies with operations in Ottawa; terms were not disclosed.