Cybersecurity Buyers & Acquisitions in Colorado

Tracked deals

20

20 tracked deals across 2019-2026.

Buyer mix

Strategic-led

16 strategic · 6 pe

Top trend

Volume peaked in 2021

5 tracked deals announced in 2021.

Primary Insight

What Stands Out

  • Identity and zero trust appear repeatedly: deals include Rubrik’s Identity Resilience expansion and DigiCert’s zero-trust email authentication capabilities.
  • Application and runtime security is a featured theme, including API security integration by Graylog (Resurface.io) and software supply chain security via Veracode (Phylum).
  • Managed services and delivery expansion are notable in Colorado, such as Exclusive Networks acquiring Cloudrise for SASE, DSPM, and CNAPP managed/professional services.
  • Cyber risk management platforms show up in the form of TPRM software and vendor assessment data, including the ProcessUnity/MarlinCyberGRX combination.
Subtheme Example buyer(s) Example target(s)
Identity resilience & email authentication Rubrik; DigiCert Strata.io; Valimail
API and software supply chain security Graylog; Veracode Resurface.io; Phylum
Services & platform integration Exclusive Networks; Xalient Cloudrise; Integral Partners

Build a buyer list for your Cybersecurity deal

Find buyers actively acquiring cybersecurity companies.

Find buyers like these for your deal

Buyer Snapshot

Top Buyers

Illustrative buyers pulled from tracked transactions on this page. This table is capped and intentionally non-exhaustive.

Build a buyer list for your Cybersecurity deal →
Buyer # Deals Focus Type
Accel 1 Global venture capital firm investing across early to gro... Investor
ArcherHall 1 Provider of digital forensics, eDiscovery, cybersecurity ... Strategic
Avertium 1 Managed security and strategic consulting provider delive... Strategic (PE-backed)
Bain Capital Tech Opportunities 1 Technology-focused private investment unit of Bain Capita... PE
CIVC Partners 1 Middle-market private equity firm that partners with comp... PE
Carbonite, Inc. 1 Cloud-based data protection provider offering backup, dis... Strategic
Criterion Systems, Inc. 1 Cybersecurity and IT services company providing cybersecu... Strategic
Deloitte & Touche LLP 1 Global professional services firm providing audit, consul... Strategic
DigiCert 1 Digital trust provider offering PKI/certificate and ident... Strategic
Evergreen Services Group 1 Holding company/family of managed IT and cybersecurity se... Strategic

Acquisition Volume in Cybersecurity in Colorado by Year

Last 8 years

Acquisition volume by year Annual acquisition counts for the last 8 years for Cybersecurity Buyers & Acquisitions in Colorado. 3 2019 1 2020 5 2021 3 2022 4 2023 1 2024 2 2025 ~2 est. 1 2026
Actual Full-year estimate

Supporting Data

Recent Transactions

  • Buyer
    Rubrik
    Target
    Strata.io
    Industry
    Cybersecurity
    Type
    Buyout

    Rubrik introduced two new Identity Resilience capabilities—Identity Continuity and Identity Roll Forward. Identity Continuity is powered by Rubrik’s acquisition of Strata.io, while Identity Roll Forward was developed in-house by Rubrik; terms were not disclosed and both capabilities are available in private preview.

  • September 16, 2025
    Buyer
    DigiCert
    Target
    Valimail
    Industry
    Cybersecurity
    Type
    Buyout

    DigiCert announced the acquisition of Valimail, a zero trust email authentication provider delivered as a service. The deal is intended to expand DigiCert ONE with zero trust email authentication capabilities, strengthening protection against phishing and spoofing.

  • Buyer
    Veracode
    Target
    Phylum, Inc.
    Industry
    Cybersecurity
    Type
    Buyout

    Veracode has acquired certain assets and technology from Phylum, Inc. to integrate Phylum's malicious package detection, database, and package management firewall into Veracode's Software Composition Analysis (SCA) offering. The deal expands Veracode's software supply chain security capabilities and brings Phylum's research team and real-time malicious package defenses into Veracode's platform.

  • Buyer
    Exclusive Networks
    Target
    Cloudrise
    Industry
    Cybersecurity
    Type
    Buyout

    Exclusive Networks has acquired 100% of Cloudrise, a Grand Junction, Colorado-based security services provider specializing in managed and professional services for SASE, DSPM and CNAPP solutions. The deal strengthens Exclusive Networks' U.S. footprint and service capabilities by integrating Cloudrise's expertise and delivery centers while allowing Cloudrise to continue operating under its brand within the Exclusive Networks ecosystem.

  • Buyer
    Xalient
    Target
    Integral Partners LLC
    Industry
    Cybersecurity
    Type
    Buyout

    UK-based secure networking and identity specialist Xalient has acquired Integral Partners LLC, a Boulder, Colorado–based digital identity consulting and advisory firm focused on Identity and Access Management (IAM). The deal adds deep identity security and IAM consulting capabilities to Xalient's managed services portfolio and bolsters its presence in North America to accelerate customers' zero-trust journeys.

  • Buyer
    Graylog
    Target
    Resurface.io
    Industry
    Cybersecurity
    Type
    Buyout

    Graylog has acquired Resurface.io (Resurface Labs) and will integrate its data-driven API security platform into Graylog’s SIEM offering as Graylog API Security. The acquisition strengthens Graylog’s threat detection and incident response capabilities by adding runtime API telemetry, full request/response payload forensics, and API-specific alerts for enterprise customers.

  • Buyer
    ProcessUnity, Marlin Equity Partners
    Target
    CyberGRX
    Seller
    CyberGRX existing shareholders
    Industry
    Cybersecurity
    Type
    Addon

    Marlin Equity Partners and ProcessUnity have acquired CyberGRX and will merge CyberGRX into ProcessUnity to create an expanded third-party cyber risk management (TPRM) software and data platform. The transaction combines ProcessUnity's workflow and program management capabilities with CyberGRX's validated vendor assessment data and risk intelligence; CyberGRX's existing shareholders retained a minority stake in the combined company.

  • Buyer
    Bain Capital Tech Opportunities, Accel
    Target
    Blackpoint Cyber
    Industry
    Cybersecurity

    Blackpoint Cyber received a $190 million growth investment led by Bain Capital Tech Opportunities with participation from Accel. The funding will be used to accelerate product development of Blackpoint's cybersecurity platform and expand support for its MSP partners; existing investors include Adelphi Capital Partners, Telecom Ventures, Pelican Ventures and WP Global Partners.

  • Buyer
    Thoma Bravo
    Target
    Ping Identity
    Industry
    Cybersecurity
    Type
    Buyout

    Thoma Bravo completed its all-cash acquisition of Ping Identity in a transaction valued at approximately $2.8 billion ($28.50 per share). Ping Identity stock was delisted from the New York Stock Exchange after completion.

  • Buyer
    WP Global Partners
    Target
    Blackpoint (Blackpoint Cyber)
    Industry
    Cybersecurity

    WP Global Partners made a growth investment in Blackpoint (Blackpoint Cyber) on May 6, 2022. Blackpoint is a Denver-based cybersecurity company that develops a software platform and managed detection & response services to prevent lateral spread of breaches.

  • Buyer
    ArcherHall
    Target
    Forensic Pursuit
    Industry
    Cybersecurity
    Type
    Buyout

    ArcherHall, a Sacramento-based digital forensics and eDiscovery services firm, has acquired Forensic Pursuit, a Denver-based provider of digital forensics, e-discovery, and expert witness services. The deal expands ArcherHall's national footprint by adding Forensic Pursuit's offices and personnel across multiple U.S. markets and strengthens its capabilities serving law firms, corporations, and e-discovery providers.

  • Buyer
    Criterion Systems, Inc.
    Target
    SAGE Black Consulting and Contracting, LLC
    Industry
    Cybersecurity
    Type
    Buyout

    Criterion Systems, Inc. has acquired SAGE Black Consulting and Contracting, LLC, a small government contractor specializing in software engineering for GEOINT/SIGINT, space, and cyber with growing AI/ML capabilities. SAGE Black will operate as a wholly-owned subsidiary within Criterion's Intelligence Solutions business unit to strengthen Criterion's software engineering, AI/ML, and intelligence-focused services for federal and intelligence community customers; financial terms were not disclosed.

  • Buyer
    iVision, CIVC Partners
    Target
    Carve Systems
    Industry
    Cybersecurity
    Type
    Addon

    iVision, a CIVC Partners-backed technology integration and management firm based in Atlanta, has acquired Carve Systems, a boutique cybersecurity consulting firm. The add-on expands iVision’s cybersecurity capabilities to better serve enterprise and mid-market clients and will retain Carve as a subsidiary brand within iVision.

  • Buyer
    Evergreen Services Group
    Target
    VirtualArmour
    Industry
    Cybersecurity
    Type
    Buyout

    Evergreen Services Group entered into a definitive agreement to acquire substantially all operating assets of VirtualArmour, a global managed security services provider (MSSP). The deal expands Evergreen's cybersecurity capabilities—adding VirtualArmour's SOCaaS, professional services and global Security Operations Centers—and the business will continue to operate under CEO Russ Armbrust.

  • Buyer
    Proofpoint, Inc.
    Target
    InteliSecure, Inc.
    Seller
    Frontier Growth
    Industry
    Cybersecurity
    Type
    Buyout

    Proofpoint, Inc. agreed to acquire InteliSecure, a data-loss-protection managed services provider, for $62.5 million in cash. The acquisition (expected to close in Q1 2021) adds roughly 150 employees and strengthens Proofpoint’s people-centric cloud-based DLP and managed security services; InteliSecure was sold by investor Frontier Growth.

  • Buyer
    Deloitte & Touche LLP
    Target
    Root9B, LLC
    Seller
    Root9B, LLC
    Industry
    Cybersecurity
    Type
    Buyout

    Deloitte & Touche LLP has acquired substantially all assets of Root9B, LLC to enhance Deloitte's Detect and Respond cyber offering with Root9B's threat-hunting professionals and solutions. The deal adds threat-hunting, managed detection and response, and digital forensics capabilities to Deloitte's cyber practice to better serve commercial and government clients.

  • Buyer
    Avertium
    Target
    1440 Security
    Industry
    Cybersecurity
    Type
    Addon

    Avertium has acquired 1440 Security, a nationally recognized managed security service provider with a Colorado-based 24/7 security operations center, to strengthen Avertium's LogRhythm expertise and extend its XDR and advanced threat management capabilities. The deal adds a third CyberOps Center of Excellence to Avertium's existing centers and expands its managed security and incident response offerings.

  • Buyer
    Funds advised by Apax Partners
    Target
    Coalfire
    Seller
    The Carlyle Group, The Chertoff Group
    Industry
    Cybersecurity
    Type
    Buyout

    Funds advised by Apax Partners have completed the acquisition of Coalfire, a cybersecurity advisory and assessment services firm, from The Carlyle Group and The Chertoff Group. The investment will support Coalfire's growth through technology investment, expanded services (including cloud security, penetration testing and CMMC readiness) and strategic acquisitions.

  • Buyer
    Carbonite, Inc.
    Target
    Webroot, Inc.
    Industry
    Cybersecurity
    Type
    Buyout

    Carbonite, Inc. completed its acquisition of Webroot Inc. for $618.5 million in cash, combining Carbonite's cloud-based backup and recovery capabilities with Webroot's cloud-native cybersecurity platform. The transaction is intended to create an integrated data protection and endpoint security offering for small and mid-sized businesses and managed service providers.

  • Buyer
    Verizon Communications Inc.
    Target
    ProtectWise, Inc.
    Industry
    Cybersecurity
    Type
    Buyout

    Verizon Communications closed its acquisition of ProtectWise, a Denver-based provider of cloud-delivered Network Detection and Response (NDR). Verizon will integrate ProtectWise's NDR technology and team into its enterprise security offerings to expand detection and response capabilities and support customers as they adopt next-generation connectivity including 5G; terms were not disclosed.

Full Export

Purchase this data

Get the full acquisitions list for this page as CSV + XLSX.

Build a buyer list for your Cybersecurity deal

Find buyers actively acquiring cybersecurity companies.

Apply as a Buyer

Frequently Asked Questions

Which cybersecurity acquisition themes show up most in Colorado?

Identity and zero-trust capabilities, application/API security, software supply chain security, and cyber risk management platforms recur across the Colorado deals shown.

Are there deals focused on identity or authentication specifically?

Yes. Rubrik acquired Strata.io to expand Identity Resilience capabilities, and DigiCert acquired Valimail to strengthen zero-trust email authentication in DigiCert ONE.

Do Colorado deals include cybersecurity services or managed delivery?

Yes. Exclusive Networks acquired Cloudrise, a Colorado-based security services provider specializing in managed and professional services for SASE, DSPM, and CNAPP solutions.

Are acquisitions in the list strictly software products?

Not strictly. The list includes technology acquisitions (e.g., API security and SCA-related capabilities) and service- and platform-oriented deals such as TPRM and consulting/managed services additions.

Related Acquisition Pages