Cybersecurity Acquisitions in United States

KeyData Cyber, a portfolio company of CIVC Partners, acquired BeyondID, an AI-powered Managed Identity Solutions Provider focused on identity and access management and zero-trust solutions. The transaction expands KeyData Cyber’s advisory, implementation, and managed services capabilities and adds BeyondID’s Identity Command Center platform, strengthening the combined firm’s North American identity security footprint.

Sophos completed its all-cash acquisition of Secureworks for approximately $859 million, taking Secureworks private and ending its Nasdaq listing. The combination expands Sophos’ managed detection and response (MDR) and broader cybersecurity platform capabilities, including adding Secureworks’ Counter Threat Unit and advisory teams. Sophos is backed by Thoma Bravo, and Secureworks shareholders (including Dell Technologies) will receive $8.50 per share in cash.

CyberMaxx announced it has closed the acquisitions of Cybersafe Solutions and onShore Security to expand and scale its modern managed detection and response (MDR) services. The transactions add security resources, domain expertise, and enterprise-grade cybersecurity capabilities, with the combined organization operating under the CyberMaxx brand.

Synerion USA Inc., a cloud-based workforce management software provider, announced the acquisition of Qumulex Inc., a cloud-native video surveillance and access control platform. The deal expands Synerion’s offerings into the physical security market, enhancing its access control and video surveillance capabilities as part of its broader growth strategy.

CyberGuard Advantage announced the acquisition of Control Logics' CPA practice (SOC audit/attestation business), expanding its SOC 1/SOC 2 and broader compliance services. CyberGuard Advantage is a portfolio company of Atlantic Street Capital, and the deal adds scale, an experienced delivery team, and a high-quality client base to its existing SOC audit offering.

Garda World Security Corporation (GardaWorld) entered into a binding agreement to acquire OnSolve, LLC, a provider of critical event management software and services. GardaWorld plans to combine OnSolve with its Crisis24 business to create a more comprehensive, AI-enhanced integrated risk management and critical event management offering.

Fortinet Inc. has agreed to acquire Lacework Inc., a cloud security startup that provides a cloud-native application protection platform (CNAPP) for securing hybrid cloud environments. Financial terms were not disclosed, and Fortinet plans to integrate Lacework’s CNAPP into its broader cybersecurity product portfolio once the deal closes later this year.

Cohesity Inc. announced it will acquire Veritas Technologies LLC’s data protection unit, creating a combined company expected to be valued at about $7 billion with pro forma annual revenue of $1.6 billion. The merged entity will be led by Cohesity CEO Sanjay Poonen and will expand Cohesity’s portfolio with Veritas offerings such as NetBackup and related appliances. Carlyle (Veritas’ majority stakeholder) and other investors will participate in the transaction, which is expected to close by year-end subject to regulatory approval.

IP Pathways, a technology solutions provider headquartered in Des Moines, Iowa, announced the acquisition of Tenax Solutions, a security solutions provider. The deal expands IP Pathways’ security and compliance capabilities, including services such as vulnerability scanning, penetration testing, and compliance examinations, to better serve clients across the United States.

SonicWall announced it has acquired Solutions Granted, Inc. (SGI), a Managed Security Service Provider serving MSPs and MSSPs. The deal expands SonicWall’s managed security offerings to include U.S.-based SOC-as-a-Service, Managed Detection and Response (MDR), and related managed services tailored for channel partners.

Cuentas, Inc. signed a binding letter of intent to complete a share-exchange transaction that would make World Health Energy Holdings, Inc. (d/b/a WHEN Group) a majority-owned subsidiary of Cuentas, subject to Nasdaq and shareholder approvals and other conditions. As part of the deal, WHEN Group’s majority shareholder UCG, Inc. will exchange its 75% stake in WHEN Group for Cuentas shares representing 50% of Cuentas’ fully diluted outstanding capital at issuance. The companies plan to integrate WHEN Group’s cybersecurity and AI solutions into the Cuentas Mobile platform and offer them to Cuentas’ FinTech partners.

Lumifi acquired Castra Managed Services (also referred to as Castra Managed Security) to expand its managed detection and response (MDR) capabilities, particularly strengthening SIEM expertise around the Exabeam platform. The combination enhances Lumifi’s security operations offerings across NDR, EDR, and SIEM, supporting a 24/7/365 SOC and integrating Lumifi’s ShieldVision platform with Castra’s MDR services.

Neovera, a cybersecurity and managed services provider, announced the acquisition of 10-D Security and AppliedCS. The deal expands Neovera’s cybersecurity, risk management, and compliance capabilities, particularly serving financial institutions and addressing evolving regulatory and security requirements.

Cisco entered into a definitive agreement to acquire Splunk in an all-cash transaction valued at approximately $28 billion in equity value ($157 per share). The combination is intended to strengthen Cisco’s security and observability offerings and accelerate its shift toward more recurring software revenue. The deal is expected to close by the end of the third quarter of calendar year 2024, subject to regulatory and Splunk shareholder approvals.

Parsons Corporation acquired Sealing Technologies, Inc. (SealingTech) in a transaction valued at up to $200 million, including $175 million in cash at closing. SealingTech, headquartered in Columbia, Maryland, provides cybersecurity research, engineering, and integration services supporting U.S. Department of Defense and Intelligence Community customers. Chesapeake Corporate Advisors served as exclusive financial advisor to SealingTech on the sale.

Stallion Infrastructure Services, Ltd. completed the acquisition of EyeSite Surveillance, Inc. and EyeOn Monitoring Services, Inc. (collectively, “EyeSite”) on August 31, 2023. The deal expands Stallion’s video surveillance offerings, adding mobile solar-powered surveillance systems and monitoring/SOC capabilities for commercial and residential construction jobsites. EyeSite operates in Arizona and Texas, with offices including Dallas, Houston, Phoenix, and Tucson.

Malwarebytes announced the acquisition of Cyrus, an online privacy solutions company, to expand its consumer-focused security and privacy offerings. The deal brings Cyrus’ team and technology into Malwarebytes to strengthen mobile and online privacy capabilities, including products like Privacy VPN and Browser Guard.

Owl Cyber Defense acquired Big Bad Wolf Security (BBWS), a Maryland-based cloud cybersecurity company focused on next-generation cloud infrastructure security and cross domain solutions. The acquisition expands Owl’s cross domain solutions portfolio into cloud-native capabilities such as Cloud CDS and strengthens its expertise in areas like Identity and Access Management configuration across major cloud providers.

Graylog acquired Resurface.io's data-driven API security platform to expand its SIEM and log management security portfolio. The deal will integrate Resurface.io’s API traffic capture and threat detection capabilities with Graylog’s SIEM to provide a combined API Threat Detection and Incident Response offering branded as Graylog API Security.

Sverica Capital Management announced a strategic growth investment in Zyston, a provider of end-to-end cybersecurity solutions and managed detection and response services. Zyston will continue to be led by founder and CEO Craig Stamm, and Sverica representatives will join Zyston’s board as part of the transaction.

Global Market Innovators (GMI) announced the acquisition of CyVig, a managed security service provider (MSSP), to strengthen GMI’s security operations and managed services capabilities. The deal enhances GMI’s ability to deliver end-to-end secure technology solutions and 24/7 cybersecurity services as it advances its vision of becoming a Secure Managed Services Provider.

Snyk agreed to acquire Enso Security, a pioneer of Application Security Posture Management (ASPM), to enhance Snyk’s developer security platform and help enterprises secure software supply chains at scale. The deal is subject to customary closing conditions and is expected to close in Q2 2023.

Cradlepoint, a subsidiary of Ericsson, acquired Ericom Software and its cloud-based enterprise security platform. The deal strengthens Cradlepoint’s SASE and zero trust security strategy and will underpin the new Cradlepoint NetCloud Threat Defense cloud service for hybrid 5G and wireline environments.

Splashtop has acquired Foxpass, a cloud-based identity-centric network and server access management provider, to broaden its remote access and security portfolio. Foxpass will remain a brand and product line within Splashtop, and Splashtop plans to retain Foxpass employees and invest in accelerating the Foxpass product roadmap. Financial terms were not disclosed.

Rapid7, Inc. acquired Minerva Labs, Ltd., a provider of anti-evasion and ransomware prevention technology, to enhance Rapid7’s Managed Detection and Response (MDR) offering. The deal extends Rapid7’s managed threat detection and orchestration capabilities from endpoint to cloud resources. Rapid7 will pay approximately $38 million in cash and stock, subject to adjustments.

Periscope Equity’s portfolio company CyberMaxx acquired CipherTechs to expand its full-spectrum cybersecurity services. The combination strengthens CyberMaxx’s offensive and defensive security offerings, DFIR, and governance, risk & compliance capabilities. CyberMaxx also announced the appointment of Brian Ahern as CEO to help drive growth.

Vista Equity Partners has acquired KnowBe4, a Frontier Growth portfolio company and a provider of security awareness training and simulated phishing solutions. The deal concludes Frontier Growth’s partnership with KnowBe4 and is intended to provide KnowBe4 with additional resources to enhance its cybersecurity offerings.

GreenPages Technology Solutions acquired Arcas Risk Management, a Massachusetts-based cybersecurity, risk advisory, and compliance consulting firm, in a transaction completed on February 1, 2023. The deal expands GreenPages’ cybersecurity practice, adding capabilities including incident response, risk assessments, cybersecurity programs, and security operations.

Redwood Software acquired Cerberus, a secure file transfer provider best known for Cerberus FTP Server. The deal expands Redwood’s enterprise automation and managed file transfer portfolio and strengthens its secure file transfer automation capabilities for large global organizations.

Phenna Group has acquired PKI Solutions to expand its cybersecurity capabilities and broaden its international presence. Based in Portland, Oregon, PKI Solutions provides public key infrastructure (PKI) products, services, and training, including its PKI Spotlight management solution.

Sign In Solutions, a cloud-based visitor management and risk mitigation software provider backed by PSG, acquired ThreatSwitch. The deal expands Sign In Solutions’ VM 2.0 vision by adding ThreatSwitch’s cloud-based compliance, approvals, and workspace management capabilities to complement its core visitor management platforms.

Ethixbase, a provider of third-party risk management solutions, completed its acquisition of Tcompliance (formerly known as TRACE Inc.). The combination is intended to create a more comprehensive offering for third-party and supply chain risk management, including enhanced due diligence, ESG risk benchmarking, monitoring, and certification capabilities. Financial terms were not disclosed.

Thoma Bravo completed its all-cash acquisition of Ping Identity in a transaction valued at approximately $2.8 billion. Ping Identity stockholders will receive $28.50 per share, and the company’s shares have ceased trading and will be delisted from the New York Stock Exchange.

SilverEdge Government Solutions, backed by Godspeed Capital Management, has acquired QVine LLC, a provider of agile software development, cloud services, and SaaS solutions for U.S. Intelligence Community customers. The deal adds QVine’s SOAR software development platform and expands SilverEdge’s cyber and technology solutions capabilities. QVine’s leadership team will remain in place and will co-invest equity in the transaction.

Bitwarden secured a $100 million minority growth investment led by PSG, with participation from existing investor Battery Ventures. The funding will support Bitwarden’s product expansion and scaling of its open-source password management platform for individuals and enterprises.

HCAP Partners, in partnership with BOK Financial, announced an investment in Lumifi Cyber, a managed detection and response (MDR) cybersecurity software provider. The investment helped fund Lumifi Cyber’s acquisition of Datashield, expanding Lumifi’s capabilities with Datashield’s MDR services and security operations expertise. Financial terms were not disclosed.

MicroAge announced the acquisition of cStor, a provider of cybersecurity, modern infrastructure, and digital transformation solutions. The deal expands MicroAge’s digital transformation service offerings by adding a mature cybersecurity practice and deeper data center delivery, networking engineering, and professional services capabilities.

Forescout Technologies has completed its acquisition of Cysiv, a cloud-platform cybersecurity company focused on improving threat detection and response. The deal is intended to enhance Forescout’s automated cybersecurity capabilities by combining Forescout’s agentless visibility and automation with Cysiv’s cloud-native threat analytics and data science to enable closed-loop threat protection.

Microsoft has entered into an agreement to acquire Miburo, a cyber threat analysis and research company focused on detecting and responding to foreign information operations. Miburo will join Microsoft’s Customer Security and Trust organization, strengthening Microsoft’s threat intelligence and analysis capabilities against nation-state and influence-based cyber threats.

Thrive, a managed cybersecurity and digital transformation services provider and portfolio company of Court Square Capital Management, acquired Edge Technology Group. The combination expands Thrive’s global footprint with additional offices and data centers across the United Kingdom and Asia-Pacific, strengthening its managed services offering for financial-industry clients.

Johnson Controls acquired Tempered Networks, a Seattle, Washington-based zero trust cybersecurity provider known for its Airwall technology. The deal strengthens Johnson Controls’ OpenBlue platform by adding software-defined perimeter security, micro-segmentation, and granular access control for connected building networks from edge to cloud. Financial terms were not disclosed.

Centroid Systems, LLC has completed the acquisition of Guardian Eagle, a St. Petersburg, Florida-based consulting provider focused on data and database security. The deal expands Centroid’s data security technologies and expertise to enhance its end-to-end cloud transformation, consulting, and managed services offerings. VSS, a private investment firm and board member of Centroid, highlighted the strategic fit of Guardian Eagle’s team and client portfolio with Centroid.

DigiCert, Inc. announced it has acquired DNS Made Easy, a provider of enterprise-grade managed DNS services, including its affiliated brand Constellix. The deal expands DigiCert’s digital trust portfolio by adding managed DNS capabilities to complement its certificate lifecycle management offerings; financial terms were not disclosed.

Vector Capital entered into a definitive agreement to make a large new equity investment in WatchGuard Technologies and become its majority shareholder. As part of the transaction, Vector Capital will acquire interests previously owned by Francisco Partners and other co-investors; financial terms were not disclosed and closing is expected by the end of Q3 2022, subject to customary conditions.

KKR signed a definitive agreement for its investment funds to purchase Barracuda Networks Inc., a cloud-first cybersecurity software provider, from Thoma Bravo. Financial terms were not disclosed, and the transaction is expected to close by year-end subject to customary conditions.

Airiam, a newly formed managed IT and digital transformation firm with a strong cybersecurity focus, announced the acquisitions of Syntervision (Alabama) and Transcendent (Wisconsin). The deals expand Airiam’s managed IT and cybersecurity platform offerings for small and mid-sized enterprises; financial terms were not disclosed.

Radian Generation, backed by 424 Capital, acquired Green IT Energy Applications to expand its operational technology, cybersecurity services, and software offerings for the renewable energy industry. Green IT’s team and software platforms will be integrated into Radian to provide an end-to-end lifecycle solution for managing renewable energy assets.

Spire Capital Partners completed a controlling investment in Pen-Link Inc. (PenLink), a provider of mission-critical communications surveillance and investigative software for law enforcement agencies. Based in Lincoln, Nebraska, PenLink will partner with Spire Capital to accelerate growth, deepen penetration in the U.S. government market, and expand into new geographies and product adjacencies.

Two Six Technologies acquired River Loop Security LLC to enhance its highly technical cybersecurity and embedded systems capabilities for national security and commercial customers. River Loop adds expertise in hardware reverse engineering, wireless and IoT security, penetration testing, and specialized cybersecurity R&D, including its Pilot Security IoT firmware analysis platform.

Mission Critical Partners (MCP) has acquired Secure Halo, a cybersecurity firm serving federal, state, and local government agencies as well as commercial clients. The deal expands MCP’s managed cybersecurity services portfolio, strengthens its cyber talent and capabilities, and increases its capacity to secure mission-critical environments and improve operational resiliency.

TA Associates signed a definitive agreement to make a significant growth investment in Veracode, valuing the company at $2.5 billion. Veracode’s current majority investor, Thoma Bravo, will retain a minority position following the transaction, which is expected to close in Q2 2022 subject to customary conditions.

Clearlake Capital Group has completed its acquisition of Quest Software, a global provider of cybersecurity, data intelligence, and IT operations management software. Quest was acquired from Francisco Partners, and CEO Patrick Nichols will continue to lead the company. Financial terms were not disclosed.

Forescout Technologies announced it has acquired CyberMDX, a healthcare cybersecurity provider focused on visibility and threat prevention for medical devices and clinical networks. The deal expands Forescout’s IT/IoT/OT device security capabilities with added Internet of Medical Things (IoMT) expertise to better protect healthcare organizations from cyber threats.

Fishtech Group and Herjavec Group announced a merger to form a combined cybersecurity services provider, backed by funds advised by Apax Partners LLP. The Apax Funds will hold a majority stake in the new entity, while Fishtech founder Gary Fish and Herjavec Group founder Robert Herjavec will retain significant equity and lead the combined company.

Varen Technologies announced it has received a strategic investment from private equity firm Godspeed Capital Management LP. The investment positions Varen as a cornerstone platform for building a leading cyber and technology solutions provider serving the U.S. Defense and Intelligence communities; financial terms were not disclosed.

Sverica Capital Management LP made a strategic investment in ShadowDragon, a threat intelligence and OSINT software provider. ShadowDragon founder and CEO Daniel Clemens will continue to lead the company, and Sverica representatives Frank Young and Michael Dougherty will join ShadowDragon’s Board of Directors.

HelpSystems announced the acquisition of Digital Guardian, a provider of SaaS and managed service-enabled data loss prevention (DLP) solutions for large and mid-sized organizations. The deal expands HelpSystems’ data security portfolio by adding endpoint, network, and cloud DLP capabilities along with data classification and managed services.

HelpSystems announced the acquisition of PhishLabs, a cyber threat intelligence company focused on digital risk protection for brands, employees, and digital assets. PhishLabs’ team and solutions will join and expand HelpSystems’ cybersecurity portfolio, complementing its email security, vulnerability management, and data protection offerings.

Lightyear Capital LLC announced that affiliated investment funds agreed to acquire assets from and partner with Schellman & Company, LLC to form a new venture focused on information technology and cybersecurity compliance services. Following the transaction, Schellman will operate as a licensed CPA firm providing attest services, while a newly formed entity, Schellman Compliance, LLC, will provide non-attest services; financial terms were not disclosed. The deal also recapitalizes the majority ownership interests of founder and CEO Chris Schellman, enabling an earlier exit ahead of his planned 2027 retirement.

Cytracom announced the acquisition of OmniNet to expand into the security and connectivity market. OmniNet’s SD-WAN and cloud security technology will be integrated to accelerate Cytracom’s product roadmap for secure, reliable connectivity for distributed workforces and SMB customers.

Thoma Bravo signed a definitive agreement to make a strategic growth investment in Intel 471, a provider of cyber threat intelligence via its TITAN platform. Intel 471’s co-founders Mark Arena and Jason Passwaters will continue to lead the company and retain significant ownership; financial terms were not disclosed. Antares Capital is providing debt financing for the transaction.

Thoma Bravo completed its acquisition of Proofpoint, a cybersecurity and compliance company, for approximately $12.3 billion in cash. Proofpoint shareholders received $176.00 per share, and the company’s common stock ceased trading and was delisted from Nasdaq following closing.

AML RightSource (AMLRS), a provider of outsourced AML/KYC/BSA compliance solutions backed by Gridiron Capital, acquired QuantaVerse, Inc. QuantaVerse provides an AI- and RPA-enabled financial crime platform that automates financial crime identification and investigation, and the deal is intended to expand AML RightSource’s tech-enabled service offerings.

ivision announced the acquisition and merger of Carve Systems to expand and strengthen its cybersecurity capabilities for clients. Carve Systems will continue operating under the Carve brand as a subsidiary brand within the ivision company, adding security consulting, training, and risk management services to ivision’s portfolio.

OVHcloud announced it has acquired BuyDRM, Inc., a Texas-based company specializing in security technologies and cryptographic systems for digital rights management (DRM) applications. The acquisition includes BuyDRM’s key talent and intellectual property, with the entire team and founders joining OVHcloud. OVHcloud plans to integrate BuyDRM’s security expertise into its cloud and PaaS offerings to accelerate its security roadmap and expand its service portfolio.

Symphony Technology Group (STG) announced that a consortium led by it has completed the acquisition of McAfee's Enterprise business. The acquired business, McAfee Enterprise, will operate as a standalone enterprise cybersecurity company and is expected to be re-branded in the coming months.

Sophos announced it has acquired Braintrace, a privately held company, to enhance Sophos’ Adaptive Cybersecurity Ecosystem with Braintrace’s Network Detection and Response (NDR) technology. Braintrace, headquartered in Salt Lake City, Utah, will integrate its NDR capabilities into Sophos’ Managed Threat Response (MTR), Rapid Response, and Extended Detection and Response (XDR) offerings, with Braintrace staff joining Sophos’ teams.

Audax Private Equity acquired a majority stake in Flashpoint, a provider of actionable threat intelligence and intelligence automation. The investment is intended to support Flashpoint’s continued growth initiatives; financial terms were not disclosed.

Forcepoint has signed a definitive agreement to sell its Global Governments and Critical Infrastructure (G2CI) business to TPG, which will establish the unit as an independent entity. TPG will invest through TPG Capital, while Forcepoint’s Commercial business will remain owned by Francisco Partners and its co-investors. The deal is subject to regulatory review and is expected to close in the fourth quarter of 2023.

Imprivata announced it has acquired Xton Technologies, a provider of privileged access management (PAM) solutions. The deal adds Xton’s Xton Access Manager (XTAM) capabilities to Imprivata’s identity and access management platform, strengthening governance and control for privileged users across healthcare and other regulated enterprises.

Evergreen Services Group entered into a definitive agreement to acquire substantially all operating assets of VirtualArmour, a global managed security services provider (MSSP). Following closing (expected in late Q2 or early Q3 2021), VirtualArmour will continue to operate independently under its existing leadership team led by CEO Russ Armbrust.

LookingGlass Cyber Solutions announced the acquisition of AlphaWave, a cloud-native attack surface management technology company based in Austin, Texas. The deal expands LookingGlass’s existing cyber risk and attack surface management capabilities by adding deeper visibility into cloud and container environments, while giving AlphaWave customers access to LookingGlass’s threat intelligence platform.

SecureLink acquired Maize Analytics to strengthen SecureLink’s third-party remote access and security offerings with Maize’s data governance and machine learning capabilities. The combined platform aims to improve security, privacy, and compliance—particularly for regulated industries such as healthcare—by identifying non-compliant or risky system access behavior.

HelpSystems acquired Beyond Security, a provider of cloud-based vulnerability assessment and management software. The acquisition expands HelpSystems' infrastructure protection and cybersecurity portfolio, complementing products such as Digital Defense, Core Security, and Cobalt Strike. KPMG Corporate Finance LLC served as exclusive investment banking advisor to Beyond Security.

HKW acquired CIS Secure Computing, Inc. from Acorn Growth Companies for an undisclosed amount. Headquartered in Ashburn, Virginia, CIS provides secure, customized communications technologies and secure endpoint hardware/software solutions serving government and security-conscious customers.

Funds advised by Triton acquired ACRE, an end-to-end electronic security solutions provider headquartered in Dallas with operations in Dublin. Triton will invest alongside ACRE’s current management team, while prior majority investor LLR Partners is exiting its stake. Financial terms were not disclosed.

Idera, Inc. announced the acquisition of PreEmptive Solutions, LLC, a provider of application protection and security tools. PreEmptive will join Idera’s DevOps business unit, expanding Idera’s DevOps security and application resilience offerings for enterprise customers.

IST Research and Two Six Labs were acquired by an affiliate of The Carlyle Group and combined to form Two Six Technologies, Inc., a government technology platform serving U.S. national security customers. The newly formed company will provide cybersecurity and advanced technology solutions to the Intelligence Community, Department of Defense, and other U.S. Government agencies and will be led by CEO Joe Logue.

LogRhythm has acquired MistNet, a cloud-based analytics platform focused on network visibility and threat detection. The deal expands LogRhythm’s threat detection capabilities and accelerates its entry into the XDR market by adding network detection/response, distributed analytics, and AI-driven behavioral and threat modeling. Financial terms were not disclosed.

Sysnet Global Solutions acquired NuArx, Inc. to enhance its cybersecurity and compliance technology platform and accelerate expansion in North America. NuArx provides PCI compliance, managed security, and digital transformation solutions and is headquartered in Southfield, Michigan. NuArx was previously a portfolio company of One Equity Partners.

Intraprise Health acquired HIPAA One, a provider of cloud-based HIPAA compliance automation software for healthcare organizations. The combination expands Intraprise Health’s integrated cybersecurity, risk management, and compliance software offerings for the healthcare market. Bluff Point Associates led the financing for the transaction, with existing investor Health Enterprise Partners, L.P. also participating.

Alarm.com has acquired Shooter Detection Systems (SDS), a provider of indoor gunshot detection technology, to expand its commercial security solutions portfolio. SDS will operate as a subsidiary of Alarm.com, remain led by its existing management team, and continue supporting current customers and partners while integrating further with the Alarm.com ecosystem.

Thoma Bravo announced a strategic growth investment in Venafi, a provider of machine identity management, valuing the company at $1.15 billion. The investment is intended to accelerate Venafi’s technology innovation and growth as demand for machine identity management rises in cybersecurity. Existing investors TCV and Foundation Capital will remain shareholders.

Imprivata announced the acquisition of FairWarning Technologies, LLC to expand and enhance its digital identity platform for healthcare. The combined offering is intended to streamline clinical access while improving security, identity governance, and patient privacy/data compliance across healthcare organizations.

ACRE, a global provider of security systems, acquired Razberi Technologies, a video surveillance and cybersecurity-focused platform headquartered in Farmers Branch, Texas. The deal is intended to strengthen ACRE’s video and communications portfolio, including the ComNet business, by adding Razberi’s video infrastructure, cybersecurity, and system health monitoring capabilities.

Imperva, Inc. entered into an agreement to acquire jSonar, a provider of modern database security software. The deal aims to combine jSonar’s database security and analytics/SOAR capabilities with Imperva’s application and data security offerings to deliver integrated data security across on-premises and cloud environments. The transaction is expected to close in mid-October 2020, subject to customary closing conditions and regulatory clearance.

CyberRisk Alliance (CRA) has acquired Security Weekly, a cybersecurity-focused podcast and video network. Security Weekly was acquired from Defensive Intuition, LLC and its founders Paul Asadoorian and Matt Alderman, who will join CRA and continue leading and hosting Security Weekly as part of CRA’s growing portfolio of cybersecurity media and events brands.

Kaseya acquired and integrated Graphus, an automated phishing defense and cloud email security platform, to expand the security capabilities of its IT Complete platform. Graphus will continue operating as an independent business within Kaseya, led by its CEO and co-founder Manoj Srivastava, who will lead Kaseya’s cloud email security practice.

IBM signed a definitive agreement to acquire Spanugo, a US-based provider of cloud cybersecurity posture management solutions. IBM plans to integrate Spanugo’s software into its public cloud offerings to enhance secure, compliance-ready capabilities for clients in highly regulated industries, including financial services.

Funds advised by Apax Partners agreed to acquire Coalfire, a cybersecurity advisory and assessment services provider, from The Carlyle Group and The Chertoff Group. The deal (financial terms undisclosed) is expected to close in early 2020 subject to regulatory approval, and is intended to support Coalfire’s growth across compliance and cybersecurity services.

Clearlake Capital Group and TA Associates completed their previously announced investment in DigiCert, a provider of TLS/SSL, IoT and PKI digital certificate solutions. The transaction makes Clearlake and TA Associates lead investors, with DigiCert aiming to accelerate investment in automation and certificate management to drive growth; financial terms were not disclosed.

DivvyCloud announced a $19 million growth funding round led by Providence Strategic Growth, with follow-on participation from existing investors MissionOG and RTP Ventures. The capital will be used to accelerate product innovation in cloud security and compliance automation and to expand sales, marketing, and customer success to meet rising demand.

ACRE entered into a definitive agreement to acquire RS2 Technologies, an access control security systems manufacturer headquartered in Munster, Indiana. The acquisition is intended to strengthen ACRE’s access control product portfolio and expand its reach in the North American market. Financial terms were not disclosed.

Thoma Bravo, LLC completed the acquisition of Veracode Software from Broadcom Inc. in an all-cash transaction valued at $950 million. Veracode provides a SaaS-based application security testing (AST) platform that helps organizations identify and remediate software vulnerabilities throughout the development lifecycle.

EZShield, a portfolio company of The Wicks Group, has acquired IdentityForce, an identity theft protection provider serving businesses and consumers. The deal expands EZShield’s digital identity protection and cybersecurity capabilities and broadens its ecosystem of partners and customers.

PhishLine, LLC, a SaaS provider of social engineering simulation and security awareness training, has been acquired by Barracuda Networks, Inc. Cleary Gull Inc. served as exclusive financial advisor to PhishLine on the transaction. PhishLine is headquartered in Waukesha, Wisconsin.

Coalfire announced it has acquired Veris Group, a provider of cyber risk advisory, compliance assessment, technical testing, and security engineering services. The combination expands Coalfire’s cybersecurity risk, compliance, and testing capabilities across commercial and public sector markets. The transaction was supported in part by new equity investments from The Carlyle Group’s U.S. Middle-Market fund and affiliates of The Chertoff Group.

Cyber Risk Management, LLC (CRM) announced a significant growth investment in APTEC, LLC, an identity governance and access management (IAM) solution services provider headquartered in Bethesda, Maryland. APTEC will operate as a wholly owned subsidiary of CRM, expanding CRM’s data risk management services portfolio; financial terms were not disclosed.

Accenture has acquired FusionX, a Washington, DC-based cybersecurity company specializing in cyber attack simulation, threat modeling, cyber investigations, and security risk advisory services. The deal strengthens Accenture’s Security practice by adding advanced threat and vulnerability assessment capabilities; financial terms were not disclosed.

General Dynamics has entered into a definitive agreement to acquire Fidelis Security Systems, Inc., a provider of cyber security tools for real-time network visibility, analysis, and control. The all-cash transaction value was not disclosed and is expected to close in the third quarter of 2012, pending customary completion conditions and board approvals.