Cybersecurity Acquisitions in California

Proofpoint, Inc. has acquired Acuvity, an AI security and governance platform provider, to enhance its capabilities for securing AI agents, copilots, and model-connected applications across the enterprise. The acquisition adds AI-native visibility, governance and runtime protection to Proofpoint’s human- and agent-centric cybersecurity platform, enabling broader protection of people, data and AI-driven workflows.

Semperis, the identity-driven cyber resilience and crisis management company, has acquired MightyID, an identity resilience specialist for cloud identity providers Okta and Ping. The acquisition expands Semperis' platform to provide backup, restore, migration, failover and faster recovery across hybrid and multi-cloud identity environments.

Mitsubishi Electric Corporation completed its acquisition of all outstanding shares of Nozomi Networks Inc., making Nozomi a wholly owned subsidiary effective January 28, 2026. Nozomi Networks will operate as an independent subsidiary out of San Francisco and continue delivering vendor-agnostic OT/IoT cybersecurity solutions; the company reported over $100M in 2025 revenue and ~336 employees as of December 2025.

Cyderes, a global managed cybersecurity services provider, has acquired Lucidum, a security data fabric and entity intelligence platform. The acquisition brings identity-aware data fabric capabilities into Cyderes’ portfolio to strengthen IAM, exposure management, and MDR offerings and accelerate AI-driven remediation and SaaS offerings.

Veeam Software completed its $1.725 billion acquisition of Securiti AI to create a unified Data Platform that combines Veeam's data resilience capabilities with Securiti AI's DSPM, privacy, governance and AI trust functionality. The deal brings roughly 600 Securiti AI employees into Veeam and names Securiti AI founder Rehan Jalil as Veeam's President of Security and AI to accelerate safe AI adoption at scale.

RKON Technologies has acquired cloud security and consulting firm ScaleSec, integrating ScaleSec’s cloud security, compliance, and managed services capabilities into RKON’s offerings. The seller was Vixul (ScaleSec’s accelerator/portfolio backer), and the transaction strengthens RKON’s multicloud security and managed services capabilities; financial terms were not disclosed.

Checkmarx has acquired Tromzo, an AI-native startup that builds autonomous triage and remediation agents for application security, and will integrate Tromzo's reasoning engine and engineering team into the Checkmarx One platform. The acquisition brings Tromzo's founders and AI engineers into Checkmarx to power new Checkmarx Assist agents and accelerate enterprise-grade autonomous AppSec capabilities starting in early 2026.

LevelBlue has completed its acquisition of Cybereason, integrating Cybereason’s XDR platform, threat intelligence, and DFIR capabilities into LevelBlue’s managed security services. As part of the transaction, SoftBank Corp., SoftBank Vision Fund 2, and Liberty Strategic Capital took equity stakes in LevelBlue and Steven T. Mnuchin joined LevelBlue’s board, supporting the company’s capability and geographic expansion.

SAFE, a leader in cyber risk quantification, has acquired Balbix to create an integrated, AI-native platform that unifies exposure management and risk quantification. The deal combines Balbix's continuous threat exposure management capabilities with SAFE's cyber risk quantification to deliver a single, agentic-AI-driven solution for enterprise cyber risk management.

Brazilian identity network Unico has acquired OwnID, a U.S.-based startup that provides passkey-first, passwordless authentication and biometric login solutions. The deal strengthens Unico's passwordless authentication capabilities as it expands internationally; Unico processes ~25 million identity transactions per month while OwnID handles over 3.5 million authentications monthly and counts Nestlé, SAP, the NFL and Michael Kors among its clients.

Spreedly, the Durham, North Carolina-based open payments platform, has acquired Dodgeball, a San Francisco-based fraud orchestration company. The deal will integrate Dodgeball's fraud orchestration capabilities into Spreedly's payments optimization stack to deliver combined payments and fraud management functionality; terms were not disclosed.

Varonis Systems has acquired SlashNext to add AI-native email and multi-channel phishing detection to its data security platform. The deal integrates SlashNext's predictive AI models for phishing and social engineering into Varonis's data- and identity-centric threat detection and MDDR services to broaden protection across email and collaboration channels and expand Varonis's total addressable market.

KeyData Cyber, a CIVC Partners–backed identity and access management (IAM) provider, has acquired BeyondID, an AI-powered managed identity solutions provider with deep Okta expertise. The deal expands KeyData's advisory, implementation and managed-services capabilities, adds BeyondID's Identity Command Center platform and increases the combined company's delivery capacity and geographic reach across North America and beyond.

Concentric AI has acquired Swift Security and Acante to integrate their data security and data access governance capabilities into its Semantic Intelligence platform. The acquisitions expand Concentric's ability to detect 'shadow GenAI', protect data across public GenAI tools, and provide end-to-end data security governance across cloud and on-premises environments.

ArcherHall announced that R3 Digital Forensics is now part of ArcherHall, combining digital forensics, eDiscovery, and cybersecurity capabilities. The transaction expands ArcherHall’s service offering and supports a new office opening in Austin, Texas to enhance regional coverage.

Mill Point Capital LLC has acquired SS8 Networks, a Milpitas-based provider of lawful interception, location intelligence and monitoring center platforms. The deal will provide SS8 with capital and strategic support to accelerate product development, expand AI-driven capabilities, and pursue new markets while the company continues to operate under its existing brand and leadership.

Horizon3.ai raised $100 million in a Series D round led by New Enterprise Associates (NEA) with participation from SignalFire, Craft Ventures, 9Yards Capital, and Qualcomm Ventures to scale its NodeZero autonomous penetration testing platform. The funding will support product expansion, global scaling, and partner ecosystem growth as Horizon3.ai continues rapid ARR and customer growth.

OneSpan Inc. has acquired Nok Nok Labs Inc., a provider of FIDO passwordless authentication solutions, to strengthen its authentication and identity portfolio. The deal expands OneSpan's capability in passwordless/FIDO standards and integrates Nok Nok's technology to deliver broader authentication options to banking and enterprise customers.

NETGEAR, Inc. has agreed to acquire Exium, a Palo Alto–based cybersecurity company, to integrate Exium’s SASE platform into NETGEAR for Business and its Insight cloud management offering. The deal—expected to close by the end of Q2 2025—aims to deliver a single integrated networking and security solution tailored to MSPs and small and medium enterprises; Exium CEO Farooq Khan will continue to lead the Exium solution within NETGEAR for Business.

PartnerOne has acquired XYPRO, a longtime provider of cybersecurity, risk management and compliance solutions for mission-critical enterprise environments. The deal bolsters PartnerOne's cybersecurity capabilities and gives XYPRO access to PartnerOne's global scale and resources to expand its reach and accelerate product innovation.

Ridgeview Partners has made a strategic growth investment in Radiant Logic, joining existing investor TA Associates to support the company's global expansion and product innovation in Identity Security Posture Management (ISPM). The investment will help Radiant Logic accelerate development of its RadiantOne AI platform and expand commercial and government deployments; Ridgeview partners and TA will join the company's board.

Drata, the trust management/GRC platform, has acquired SafeBase to integrate a customer-facing Trust Center and accelerate its enterprise governance, risk, and compliance capabilities. The acquisition expands Drata’s product suite for automating security reviews and vendor trust workflows, complementing its AI-driven compliance automation.

Cytracom, a Sverica-backed provider of infrastructure software for MSPs, has acquired Telivy to add Security and Risk Management capabilities including Attack Surface Management and Data Security Posture Management. The acquisition expands Cytracom's platform (UCaaS and SASE) to help MSPs deliver integrated security risk assessments, monitoring, and compliance reporting.

Quorum Cyber, a UK-based cybersecurity provider backed by Charlesbank Capital Partners and Livingbridge, has acquired Kivu Consulting Inc., a U.S.-based leader in digital forensics and incident response. The add-on strengthens Quorum Cyber’s incident response, digital forensics, business restoration, and ransom negotiation capabilities while expanding its North American operations and service coverage.

WatchGuard Technologies has acquired ActZero, a provider of AI-driven managed detection and response (MDR) services, to expand and scale its WatchGuard MDR offering. The acquisition brings ActZero’s people, SOC capabilities and AI threat‑analysis platform into WatchGuard’s Unified Security Platform to accelerate MDR delivery for managed service providers (MSPs).

Arctic Wolf has agreed to acquire BlackBerry's Cylance endpoint security business for $160 million, paid in cash and approximately 5.5 million Arctic Wolf common shares. Arctic Wolf will integrate Cylance's AI-powered endpoint technology into its Aurora open-XDR platform to broaden capabilities and bolster its cybersecurity offerings; BlackBerry will remain involved as a reseller and shareholder.

Schellman & Company, LLC has acquired the Third-Party Risk Management (TPRM) practice carved out from Connor Consulting. The deal transfers select personnel and TPRM capabilities to Schellman to strengthen its cybersecurity, governance, risk, and compliance offerings and expand its third-party risk management services.

Wiz has acquired Dazz in a cash-and-share deal valued at $450 million to add remediation and attack-surface/posture-management capabilities to its cloud security platform. Dazz will continue to operate as a separate entity while being integrated into Wiz’s stack to deliver a more comprehensive 360-degree risk and remediation offering for developer and enterprise customers.

Proofpoint, Inc. has signed a definitive agreement to acquire Normalyze, a Data Security Posture Management (DSPM) provider. The acquisition will integrate Normalyze's AI-powered DSPM technology into Proofpoint's human-centric security platform to improve discovery, classification and protection of data across SaaS, PaaS, cloud, on‑prem and hybrid environments; the deal is expected to close in November 2024.

Picus Security, a San Francisco–based security validation company, raised $45 million in a growth round led by Riverwood Capital with participation from existing investor Earlybird Digital East Fund. The investment will accelerate product innovation and expand customer success, sales, and marketing as Picus grows its Adversarial Exposure Validation platform across regulated and enterprise customers.

Veeam Software has acquired Alcion, an AI-driven backup and cyber‑resilience startup focused on Microsoft 365 protection, and has appointed Alcion co‑founder Niraj Tolia as Veeam's CTO to lead product strategy for Veeam Data Cloud. The Alcion team (fewer than 50 employees) joins Veeam immediately; financial terms were not disclosed and existing Alcion customers will be offered a path to Veeam Data Cloud.

Vitaprotech has purchased Identiv’s physical- and cyber-security business units and merged those operations under the relaunched Hirsch brand to create a combined security platform. The combined company brings roughly $185 million in revenue and ~700 employees, expanding Vitaprotech/Hirsch’s engineering capacity, product breadth (access control, video, credentialing, readers) and geographic reach across the U.S. and Europe.

Absolute Security has acquired Syxsense, a provider of automated endpoint and vulnerability management, to integrate its patching and remediation capabilities into Absolute’s firmware-embedded Cyber Resilience platform. Syxsense — a 2012-founded software company backed by Origami Capital’s Oquirrh Ventures and other investors — will continue to be supported while its technology is folded into Absolute’s offerings; financial terms were not disclosed.

Ark Infotech LLC, a cloud and cybersecurity solutions provider based in Gaithersburg, Maryland, has acquired Vantyr, a San Francisco–based startup focused on securing non-human identities across cloud and SaaS environments. The acquisition expands Ark's SaaS and cloud security capabilities—integrating Vantyr's app-to-app and non-human identity technology with Ark's existing IAM and slauth.io offerings to serve commercial and government customers.

Neovera, a Reston-based cybersecurity and cloud managed services provider, has acquired Emagined Security, a San Carlos-based information security and compliance professional services firm. The acquisition expands Neovera’s Security Operations Center (SOC) capacity and strengthens its capabilities in penetration testing, vulnerability assessments, threat intelligence and incident response to better serve highly regulated industries including financial services, healthcare and government.

Exabeam and LogRhythm have completed a merger that combines Exabeam's AI-driven security operations platform with LogRhythm's high-integrity data ingestion and SIEM capabilities. The combined company will operate under the Exabeam name and pursue an integrated product roadmap to deliver cloud-native and on-premises SIEM, UEBA, and automated TDIR capabilities to enterprise customers.

Formstack, the workflow and data-capture platform backed by PSG and Silversmith Capital Partners, has acquired Open Raven, a cloud data discovery and security company. The deal will embed Open Raven’s data discovery, classification, and visibility capabilities into Formstack’s workflow platform to improve data security, compliance, and activation; Open Raven CEO Dave Cole will become Formstack’s Chief Technology Officer.

Incode Technologies, a San Francisco–based identity verification platform, has acquired MetaMap, a Silicon Valley identity verification and customer identity platform. The deal combines Incode's enterprise-scale AI identity orchestration and deepfake protection with MetaMap's data catalog and midmarket optimization capabilities to expand product functionality and market reach.

Fortinet has entered into a definitive agreement to acquire cloud security vendor Lacework, adding Lacework’s AI‑powered cloud‑native application protection platform (CNAPP) to Fortinet’s Security Fabric. Financial terms were not disclosed; the deal is intended to integrate Lacework’s code‑to‑cloud capabilities into Fortinet’s portfolio to strengthen its cloud and application security offerings.

Akamai Technologies has agreed to acquire API security startup Noname Security for approximately $450 million, subject to customary closing conditions expected in Q2 2024. The acquisition will fold Noname's API security platform and its team of more than 200 employees into Akamai's Security Technology Group to expand Akamai's API protection capabilities and accelerate go-to-market scale.

Siris, a private equity firm, completed a significant strategic investment in Gigamon in December 2023, with Elliott Investment Management retaining its controlling interest. The capital will support Gigamon's product innovation and growth initiatives as the company expands its deep observability and cloud capabilities globally; financial terms were not disclosed.

Cohesity has combined with Veritas Technologies' enterprise data protection business to create a combined data-protection leader valued at roughly $7 billion. The transaction—funded by a Series H led by Haveli Investments with participation from multiple existing and new investors—scales Cohesity's AI-powered data security and management portfolio, expands workload support (including Veritas NetBackup and appliances), and positions Sanjay Poonen to lead the combined company.

Mimecast Limited has acquired Elevate Security to incorporate its human risk management platform into Mimecast's email and collaboration security offerings. Financial terms were not disclosed; Mimecast said the integration has begun and customers will see Elevate's technology integrated into Mimecast products in upcoming quarters.

SonicWall has acquired Banyan Security, a provider of security service edge (SSE) and zero-trust access solutions, in a deal completed December 26, 2023. The acquisition adds Banyan's cloud-native zero trust and ZTNA capabilities to SonicWall's portfolio to accelerate its SASE/SSE offerings and extend cloud-based secure access for customers and partners.

Cisco announced it intends to acquire Isovalent, a cloud-native networking and security startup best known for developing eBPF-based projects such as Cilium and Tetragon, to bolster its multicloud networking and security capabilities. The Isovalent team will join Cisco's Security Business Group and Cisco said it will continue to support the open source projects; the deal is expected to close in Cisco's third fiscal quarter of 2024.

Thales has acquired cybersecurity firm Imperva from private equity firm Thoma Bravo in an all-cash transaction valuing Imperva at approximately $3.6 billion. The deal expands Thales' data and application security capabilities, immediately boosting its cybersecurity revenue base and creating a larger global cyber portfolio; the transaction has closed.

Arctic Wolf announced its intent to acquire Revelstoke, a creator of a SOAR platform built on a Unified Data Layer, to accelerate security operations automation and AI-driven response. The acquisition will integrate Revelstoke's SOAR capabilities into the Arctic Wolf Security Operations Cloud to improve detection-to-response workflows, expand integrations, and reduce alert noise for customers.

Zyston, a Dallas-based managed security services provider backed by Sverica Capital Management, has acquired Blue Lava, a security program management SaaS platform. The deal is an add-on to Zyston's platform strategy to expand its Cybersecurity Performance Management (CPM) capabilities by integrating Blue Lava into its CyberCAST product.

CrowdStrike has agreed to acquire Bionic, an Application Security Posture Management (ASPM) pioneer, to extend its Falcon Cloud Security / CNAPP offering and deliver code-to-runtime cloud security in a unified platform. The purchase price is expected to be paid predominantly in cash with a portion in stock and options; the deal is expected to close in CrowdStrike's fiscal third quarter subject to customary conditions.

Partner One has acquired the software, intellectual property, equipment, inventory, and customer and reseller contracts of Fidelis Security (Fidelis Cybersecurity). Fidelis’ XDR and CNAPP platforms will be integrated into Partner One’s enterprise software portfolio to expand its cybersecurity capabilities and serve large government and commercial customers.