Cybersecurity Acquisitions in Colorado

DigiCert, backed by Clearlake Capital, Crosspoint Capital and TA Associates, has acquired Valimail, a leading provider of zero trust email authentication and DMARC-as-a-service. The deal adds email authentication capabilities to the DigiCert ONE platform, expands DigiCert into the $4B+ paid DMARC market, and brings Valimail's FedRAMP-authorized, cloud-native solutions and ~92,000 clients under DigiCert's digital trust portfolio.

Veracode has acquired certain assets and technology from Phylum, Inc. to integrate Phylum's malicious package detection, database, and package management firewall into Veracode's Software Composition Analysis (SCA) offering. The deal expands Veracode's software supply chain security capabilities and brings Phylum's research team and real-time malicious package defenses into Veracode's platform.

Exclusive Networks has acquired 100% of Cloudrise, a Grand Junction, Colorado-based security services provider specializing in managed and professional services for SASE, DSPM and CNAPP solutions. The deal strengthens Exclusive Networks' U.S. footprint and service capabilities by integrating Cloudrise's expertise and delivery centers while allowing Cloudrise to continue operating under its brand within the Exclusive Networks ecosystem.

UK-based secure networking and identity specialist Xalient has acquired Integral Partners LLC, a Boulder, Colorado–based digital identity consulting and advisory firm focused on Identity and Access Management (IAM). The deal adds deep identity security and IAM consulting capabilities to Xalient's managed services portfolio and bolsters its presence in North America to accelerate customers' zero-trust journeys.

Graylog has acquired Resurface.io (Resurface Labs) and will integrate its data-driven API security platform into Graylog’s SIEM offering as Graylog API Security. The acquisition strengthens Graylog’s threat detection and incident response capabilities by adding runtime API telemetry, full request/response payload forensics, and API-specific alerts for enterprise customers.

Marlin Equity Partners and ProcessUnity have acquired CyberGRX and will merge CyberGRX into ProcessUnity to create an expanded third-party cyber risk management (TPRM) software and data platform. The transaction combines ProcessUnity's workflow and program management capabilities with CyberGRX's validated vendor assessment data and risk intelligence; CyberGRX's existing shareholders retained a minority stake in the combined company.

Blackpoint Cyber received a $190 million growth investment led by Bain Capital Tech Opportunities with participation from Accel. The funding will be used to accelerate product development of Blackpoint's cybersecurity platform and expand support for its MSP partners; existing investors include Adelphi Capital Partners, Telecom Ventures, Pelican Ventures and WP Global Partners.

WP Global Partners made a growth investment in Blackpoint (Blackpoint Cyber) on May 6, 2022. Blackpoint is a Denver-based cybersecurity company that develops a software platform and managed detection & response services to prevent lateral spread of breaches.

ArcherHall, a Sacramento-based digital forensics and eDiscovery services firm, has acquired Forensic Pursuit, a Denver-based provider of digital forensics, e-discovery, and expert witness services. The deal expands ArcherHall's national footprint by adding Forensic Pursuit's offices and personnel across multiple U.S. markets and strengthens its capabilities serving law firms, corporations, and e-discovery providers.

Criterion Systems, Inc. has acquired SAGE Black Consulting and Contracting, LLC, a small government contractor specializing in software engineering for GEOINT/SIGINT, space, and cyber with growing AI/ML capabilities. SAGE Black will operate as a wholly-owned subsidiary within Criterion's Intelligence Solutions business unit to strengthen Criterion's software engineering, AI/ML, and intelligence-focused services for federal and intelligence community customers; financial terms were not disclosed.

iVision, a CIVC Partners-backed technology integration and management firm based in Atlanta, has acquired Carve Systems, a boutique cybersecurity consulting firm. The add-on expands iVision’s cybersecurity capabilities to better serve enterprise and mid-market clients and will retain Carve as a subsidiary brand within iVision.

Evergreen Services Group entered into a definitive agreement to acquire substantially all operating assets of VirtualArmour, a global managed security services provider (MSSP). The deal expands Evergreen's cybersecurity capabilities—adding VirtualArmour's SOCaaS, professional services and global Security Operations Centers—and the business will continue to operate under CEO Russ Armbrust.

Proofpoint, Inc. agreed to acquire InteliSecure, a data-loss-protection managed services provider, for $62.5 million in cash. The acquisition (expected to close in Q1 2021) adds roughly 150 employees and strengthens Proofpoint’s people-centric cloud-based DLP and managed security services; InteliSecure was sold by investor Frontier Growth.

Deloitte & Touche LLP has acquired substantially all assets of Root9B, LLC to enhance Deloitte's Detect and Respond cyber offering with Root9B's threat-hunting professionals and solutions. The deal adds threat-hunting, managed detection and response, and digital forensics capabilities to Deloitte's cyber practice to better serve commercial and government clients.

Avertium has acquired 1440 Security, a nationally recognized managed security service provider with a Colorado-based 24/7 security operations center, to strengthen Avertium's LogRhythm expertise and extend its XDR and advanced threat management capabilities. The deal adds a third CyberOps Center of Excellence to Avertium's existing centers and expands its managed security and incident response offerings.

Funds advised by Apax Partners have completed the acquisition of Coalfire, a cybersecurity advisory and assessment services firm, from The Carlyle Group and The Chertoff Group. The investment will support Coalfire's growth through technology investment, expanded services (including cloud security, penetration testing and CMMC readiness) and strategic acquisitions.

Carbonite, Inc. completed its acquisition of Webroot Inc. for $618.5 million in cash, combining Carbonite's cloud-based backup and recovery capabilities with Webroot's cloud-native cybersecurity platform. The transaction is intended to create an integrated data protection and endpoint security offering for small and mid-sized businesses and managed service providers.

Verizon Communications closed its acquisition of ProtectWise, a Denver-based provider of cloud-delivered Network Detection and Response (NDR). Verizon will integrate ProtectWise's NDR technology and team into its enterprise security offerings to expand detection and response capabilities and support customers as they adopt next-generation connectivity including 5G; terms were not disclosed.