Tracked deals
20
20 tracked deals across 2019-2026.
Tracked deals
20
20 tracked deals across 2019-2026.
Buyer mix
Strategic-led
16 strategic · 6 pe
Top trend
Volume peaked in 2021
5 tracked deals announced in 2021.
Primary Insight
| Subtheme | Example buyer(s) | Example target(s) |
|---|---|---|
| Identity resilience & email authentication | Rubrik; DigiCert | Strata.io; Valimail |
| API and software supply chain security | Graylog; Veracode | Resurface.io; Phylum |
| Services & platform integration | Exclusive Networks; Xalient | Cloudrise; Integral Partners |
Build a buyer list for your Cybersecurity deal
Find buyers actively acquiring cybersecurity companies.
Find buyers like these for your dealBuyer Snapshot
Illustrative buyers pulled from tracked transactions on this page. This table is capped and intentionally non-exhaustive.
| Buyer | # Deals | Focus | Type |
|---|---|---|---|
| Accel | 1 | Global venture capital firm investing across early to gro... | Investor |
| ArcherHall | 1 | Provider of digital forensics, eDiscovery, cybersecurity ... | Strategic |
| Avertium | 1 | Managed security and strategic consulting provider delive... | Strategic (PE-backed) |
| Bain Capital Tech Opportunities | 1 | Technology-focused private investment unit of Bain Capita... | PE |
| CIVC Partners | 1 | Middle-market private equity firm that partners with comp... | PE |
| Carbonite, Inc. | 1 | Cloud-based data protection provider offering backup, dis... | Strategic |
| Criterion Systems, Inc. | 1 | Cybersecurity and IT services company providing cybersecu... | Strategic |
| Deloitte & Touche LLP | 1 | Global professional services firm providing audit, consul... | Strategic |
| DigiCert | 1 | Digital trust provider offering PKI/certificate and ident... | Strategic |
| Evergreen Services Group | 1 | Holding company/family of managed IT and cybersecurity se... | Strategic |
Last 8 years
Supporting Data
Rubrik introduced two new Identity Resilience capabilities—Identity Continuity and Identity Roll Forward. Identity Continuity is powered by Rubrik’s acquisition of Strata.io, while Identity Roll Forward was developed in-house by Rubrik; terms were not disclosed and both capabilities are available in private preview.
DigiCert announced the acquisition of Valimail, a zero trust email authentication provider delivered as a service. The deal is intended to expand DigiCert ONE with zero trust email authentication capabilities, strengthening protection against phishing and spoofing.
Veracode has acquired certain assets and technology from Phylum, Inc. to integrate Phylum's malicious package detection, database, and package management firewall into Veracode's Software Composition Analysis (SCA) offering. The deal expands Veracode's software supply chain security capabilities and brings Phylum's research team and real-time malicious package defenses into Veracode's platform.
Exclusive Networks has acquired 100% of Cloudrise, a Grand Junction, Colorado-based security services provider specializing in managed and professional services for SASE, DSPM and CNAPP solutions. The deal strengthens Exclusive Networks' U.S. footprint and service capabilities by integrating Cloudrise's expertise and delivery centers while allowing Cloudrise to continue operating under its brand within the Exclusive Networks ecosystem.
UK-based secure networking and identity specialist Xalient has acquired Integral Partners LLC, a Boulder, Colorado–based digital identity consulting and advisory firm focused on Identity and Access Management (IAM). The deal adds deep identity security and IAM consulting capabilities to Xalient's managed services portfolio and bolsters its presence in North America to accelerate customers' zero-trust journeys.
Graylog has acquired Resurface.io (Resurface Labs) and will integrate its data-driven API security platform into Graylog’s SIEM offering as Graylog API Security. The acquisition strengthens Graylog’s threat detection and incident response capabilities by adding runtime API telemetry, full request/response payload forensics, and API-specific alerts for enterprise customers.
Marlin Equity Partners and ProcessUnity have acquired CyberGRX and will merge CyberGRX into ProcessUnity to create an expanded third-party cyber risk management (TPRM) software and data platform. The transaction combines ProcessUnity's workflow and program management capabilities with CyberGRX's validated vendor assessment data and risk intelligence; CyberGRX's existing shareholders retained a minority stake in the combined company.
Blackpoint Cyber received a $190 million growth investment led by Bain Capital Tech Opportunities with participation from Accel. The funding will be used to accelerate product development of Blackpoint's cybersecurity platform and expand support for its MSP partners; existing investors include Adelphi Capital Partners, Telecom Ventures, Pelican Ventures and WP Global Partners.
Thoma Bravo completed its all-cash acquisition of Ping Identity in a transaction valued at approximately $2.8 billion ($28.50 per share). Ping Identity stock was delisted from the New York Stock Exchange after completion.
WP Global Partners made a growth investment in Blackpoint (Blackpoint Cyber) on May 6, 2022. Blackpoint is a Denver-based cybersecurity company that develops a software platform and managed detection & response services to prevent lateral spread of breaches.
ArcherHall, a Sacramento-based digital forensics and eDiscovery services firm, has acquired Forensic Pursuit, a Denver-based provider of digital forensics, e-discovery, and expert witness services. The deal expands ArcherHall's national footprint by adding Forensic Pursuit's offices and personnel across multiple U.S. markets and strengthens its capabilities serving law firms, corporations, and e-discovery providers.
Criterion Systems, Inc. has acquired SAGE Black Consulting and Contracting, LLC, a small government contractor specializing in software engineering for GEOINT/SIGINT, space, and cyber with growing AI/ML capabilities. SAGE Black will operate as a wholly-owned subsidiary within Criterion's Intelligence Solutions business unit to strengthen Criterion's software engineering, AI/ML, and intelligence-focused services for federal and intelligence community customers; financial terms were not disclosed.
iVision, a CIVC Partners-backed technology integration and management firm based in Atlanta, has acquired Carve Systems, a boutique cybersecurity consulting firm. The add-on expands iVision’s cybersecurity capabilities to better serve enterprise and mid-market clients and will retain Carve as a subsidiary brand within iVision.
Evergreen Services Group entered into a definitive agreement to acquire substantially all operating assets of VirtualArmour, a global managed security services provider (MSSP). The deal expands Evergreen's cybersecurity capabilities—adding VirtualArmour's SOCaaS, professional services and global Security Operations Centers—and the business will continue to operate under CEO Russ Armbrust.
Proofpoint, Inc. agreed to acquire InteliSecure, a data-loss-protection managed services provider, for $62.5 million in cash. The acquisition (expected to close in Q1 2021) adds roughly 150 employees and strengthens Proofpoint’s people-centric cloud-based DLP and managed security services; InteliSecure was sold by investor Frontier Growth.
Deloitte & Touche LLP has acquired substantially all assets of Root9B, LLC to enhance Deloitte's Detect and Respond cyber offering with Root9B's threat-hunting professionals and solutions. The deal adds threat-hunting, managed detection and response, and digital forensics capabilities to Deloitte's cyber practice to better serve commercial and government clients.
Avertium has acquired 1440 Security, a nationally recognized managed security service provider with a Colorado-based 24/7 security operations center, to strengthen Avertium's LogRhythm expertise and extend its XDR and advanced threat management capabilities. The deal adds a third CyberOps Center of Excellence to Avertium's existing centers and expands its managed security and incident response offerings.
Funds advised by Apax Partners have completed the acquisition of Coalfire, a cybersecurity advisory and assessment services firm, from The Carlyle Group and The Chertoff Group. The investment will support Coalfire's growth through technology investment, expanded services (including cloud security, penetration testing and CMMC readiness) and strategic acquisitions.
Carbonite, Inc. completed its acquisition of Webroot Inc. for $618.5 million in cash, combining Carbonite's cloud-based backup and recovery capabilities with Webroot's cloud-native cybersecurity platform. The transaction is intended to create an integrated data protection and endpoint security offering for small and mid-sized businesses and managed service providers.
Verizon Communications closed its acquisition of ProtectWise, a Denver-based provider of cloud-delivered Network Detection and Response (NDR). Verizon will integrate ProtectWise's NDR technology and team into its enterprise security offerings to expand detection and response capabilities and support customers as they adopt next-generation connectivity including 5G; terms were not disclosed.
Full Export
Get the full acquisitions list for this page as CSV + XLSX.
Find buyers actively acquiring cybersecurity companies.
Identity and zero-trust capabilities, application/API security, software supply chain security, and cyber risk management platforms recur across the Colorado deals shown.
Yes. Rubrik acquired Strata.io to expand Identity Resilience capabilities, and DigiCert acquired Valimail to strengthen zero-trust email authentication in DigiCert ONE.
Yes. Exclusive Networks acquired Cloudrise, a Colorado-based security services provider specializing in managed and professional services for SASE, DSPM, and CNAPP solutions.
Not strictly. The list includes technology acquisitions (e.g., API security and SCA-related capabilities) and service- and platform-oriented deals such as TPRM and consulting/managed services additions.