Tracked deals
1351
1351 tracked deals across 2003-2026.
Tracked deals
1351
1351 tracked deals across 2003-2026.
Buyer mix
Strategic-led
1101 strategic · 493 pe
Top trend
Volume peaked in 2025
210 tracked deals announced in 2025.
Primary Insight
Build a buyer list for your Cybersecurity deal
Find buyers actively acquiring cybersecurity companies.
Find buyers like these for your dealBuyer Snapshot
Illustrative buyers pulled from tracked transactions on this page. This table is capped and intentionally non-exhaustive.
| Buyer | # Deals | Focus | Type |
|---|---|---|---|
| Thoma Bravo | 15 | Private equity firm focused on growth-oriented software a... | PE |
| Palo Alto Networks | 13 | Global cybersecurity company providing network, cloud and... | Strategic |
| TA Associates | 13 | Global growth private equity firm investing across techno... | PE |
| HelpSystems | 11 | Software company providing cybersecurity and IT operation... | Strategic (PE-backed) |
| Clearlake Capital Group, L.P. | 10 | Sector-focused private investment firm providing private ... | PE |
| Keensight Capital | 9 | European growth buyout / private equity firm focused on t... | PE |
| Accenture | 8 | Global professional services and consulting firm providin... | Strategic |
| Cisco | 8 | Global networking, security and collaboration technology ... | Strategic |
| Crosspoint Capital Partners | 8 | Private equity firm focused on cybersecurity, privacy and... | PE |
| Francisco Partners | 8 | Global private investment firm specializing in technology... | PE |
Last 10 years
Supporting Data
S&P Global has agreed to acquire OpenZeppelin, a blockchain and smart contract security company. The deal is intended to expand S&P Global’s risk-assessment capabilities into the technology layer underlying onchain financial markets, while OpenZeppelin will continue operating as a standalone business unit.
Quorum Cyber signed a definitive agreement to acquire Ontinue, a managed extended detection and response (MXDR) provider with an Agentic SOC. The proposed combination is intended to expand Quorum Cyber’s Microsoft-first, AI-enabled cyber resilience and 24/7 threat detection capabilities and extend reach across North America, the UK, and the DACH region. Financial terms were not disclosed, and closing is expected after customary conditions and approvals.
SecureSky, a provider of exposure management and AI-based managed detection and response services, acquired Soveren to extend its active protection platform with real-time Data Security Posture Management (DSPM). Soveren’s technology provides continuous visibility into sensitive data flows, including classification of encrypted TLS traffic at scale.
Surfshark, a cybersecurity and digital privacy company, has completed the acquisition of the majority stake of Optery, a US-based data removal provider. Optery will continue operating as a standalone company, integrating its data-broker and people-search deletion technology into Surfshark’s privacy ecosystem.
Everbridge acquired Open Measures to expand its open-source risk intelligence capabilities. The deal adds technology that collects and analyzes billions of publicly available signals across more than 45 digital sources to help organizations detect emerging threats earlier and connect digital signals to people, locations, assets, and operations.
Iris Powered by Generali completed a management-led buyout from Redion Group and transitioned to operate as an independent identity and cyber protection company under the new brand Iris OnWatch. The company will continue delivering its identity and cyber protection services to millions of individuals via enterprise and financial institution clients, supported by growth investors NewSpring Capital and Signal Cove Capital.
Pistachio acquired the technology behind Hugin.io to expand its human risk management platform into compliance management. The company plans to use the acquired technology to reduce the manual burden of compliance (e.g., evidence collection, audit readiness, and documentation) and make compliance a more continuous workflow within its platform.
Palo Alto Networks acquired Console, an AI-native platform for building agentic workflows across enterprise operations. Palo Alto Networks plans to integrate Console’s technology with its Cortex security platform to expand AI-powered investigation, prioritization, and automated alerting/remediation. Financial terms were not disclosed.
NetSPI and Synack have entered into a definitive agreement to merge and create a combined offensive cybersecurity platform with more than $200 million in revenue. The merged company pairs NetSPI’s penetration testing capabilities with Synack’s continuous security validation platform and network of vetted security researchers, accelerating security testing with AI while retaining human expertise.
Tusker, a mid-market IT solutions provider, acquired Fortress SRM, a Cleveland-based cybersecurity services firm, to expand its security capabilities and establish its sixth regional hub. The deal adds nearly 50 cybersecurity professionals and new offerings including a 24/7 Security Operations Center (SOC), virtual CISO services, incident response, and digital forensics.
A-LIGN, a cybersecurity compliance provider, announced its acquisition of Pathfynder, a specialized offensive and defensive cybersecurity firm. The deal expands A-LIGN’s service offerings to include advanced penetration testing, red teaming, adversary emulation, forensics, and incident response for enterprise customers with complex security needs.
Socure announced a strategic growth investment valuing the company at $5.2 billion, led by Summit Partners with participation from investors including Goldman Sachs Alternatives and Wells Fargo. In parallel, Socure acquired Fravity, integrating Fravity’s first-party agent building capabilities into Socure’s RiskOS platform as RiskOS_Agents.
Brinqa acquired PlexTrac, adding offensive security validation, remediation workflow, and reporting capabilities to Brinqa’s unified exposure management platform. The combination is positioned to close the “Continuous Threat Exposure Management (CTEM) loop” by providing proof that remediation fixes actually worked and remained effective. Financial terms were not disclosed, and PlexTrac’s products will continue to operate as standalone offerings.
SCP Standard Capital Partners AG agreed to acquire all shares in Vanea Technologies GmbH and Nocturne Technologies GmbH. Vanea develops defense solutions for autonomous warfare, while Nocturne (Nocturne Defence), based in Osnabrück, focuses on civil and military counter-UAS (drone defense) systems.
CesiumAstro Inc., a space communications and ISR systems company, announced the acquisition of Jariet Technologies, a fabless mmWave RF System-on-Chip semiconductor company focused on SATCOM, electronic warfare, and radar. The deal is intended to bring semiconductor design in-house to increase control over the RF signal chain and accelerate development of next-generation phased array satellite solutions.
NetApp acquired JetStream Software, a provider of VMware disaster recovery and migration technology. The deal is intended to expand NetApp’s cyber resilience, data protection, and cloud migration capabilities, enabling customers to start with disaster recovery in cloud environments and evolve toward production migration over time.
Privacy Bee has acquired EraseMe.app, a personal data removal service, bringing its customers and privacy technology into Privacy Bee’s platform. The deal is intended to expand Privacy Bee’s continuously identifying and removing exposed consumer information capabilities, and financial terms were not disclosed.
AXA XL, which currently owns about 49% of S-RM, has agreed to acquire the remaining shares of the company. S-RM is a global consultancy specializing in corporate intelligence and cybersecurity, and is expected to continue delivering services as part of AXA XL Risk Advisory after closing.
Infoblox completed its acquisition of Kentik, combining Infoblox’s authoritative critical network services and asset visibility with Kentik’s real-time network intelligence and observability. The deal is intended to strengthen the trusted data foundation for AI-driven networking, security, and operations across hybrid and multi-cloud environments.
Visa has entered into an agreement to acquire BioCatch for $2.4 billion in cash. The deal will combine BioCatch’s behavioral and device intelligence (AI/ML signals) with Visa’s existing cybersecurity, fraud prevention, risk, and payment security offerings to stop account takeovers and financial scams earlier in the customer journey.
Wind Point Partners has acquired Eze Castle Integration (ECI), a global managed services provider focused on cybersecurity and other enterprise technology services for regulated industries. H.I.G. Capital completed the sale of its portfolio company ECI to Wind Point as part of ECI’s transition into a modern, security-first managed services platform.
Cycurion, Inc. has closed its acquisition of substantially all assets of Kustom Entertainment, Inc.'s legacy video solutions segment, including the Digital Ally-branded portfolio. The deal adds more than $5 million in expected annual revenue and over $1.2 million in EBITDA, along with access to 800+ public safety customers and a patent portfolio of 50+ patents to strengthen Cycurion’s AI-driven cybersecurity and video/evidence platforms.
Katalyst, an e4n platform company, announced the acquisition of Layer27, a Durham, North Carolina managed services and cybersecurity provider. Layer27’s team will join Katalyst and clients will continue to be served by the same people as Layer27’s technology stack and service delivery are integrated over the coming weeks.
Geospatial intelligence and AI counter-drone company Space-Eyes has entered into a definitive business combination agreement to go public through a merger with SPAC McKinley Acquisition Corp in a deal valuing the combined business at $638 million. The transaction is expected to close in the fourth quarter of 2026, subject to regulatory and shareholder approvals, and will list the combined company on Nasdaq under ticker CUAS.
Bank of America announced plans to acquire information security consultancy MDSec Consulting Limited ("MDSec"). The transaction is expected to close in the fourth quarter of 2026, subject to receipt of regulatory approvals.
Okta has signed a definitive agreement to acquire Permiso Security, a cloud-native identity security platform for detecting and mitigating threats across human, non-human, and agentic identities in multi-cloud environments. The deal is expected to close in the third quarter of Okta’s fiscal year 2027 and will expand Okta’s capabilities into identity threat detection and response within Security Operations, including AI agent behavior visibility.
Cyera has signed a letter of intent to acquire Oasis Security, combining data security with non-human identity and agentic access management to create a unified platform for securing AI agents in enterprise environments. The proposed transaction is still moving through the completion process, and Oasis will continue operating during the transition.
SwiftConnect announced it is acquiring HID’s Workforce Business Unit, including HID SAFE, a platform that automates identity lifecycle governance for physical access. The combined solution is meant to unify access-control experiences with governance so permissions update automatically as HR, IT, and security changes occur.
Ideagen, a provider of software for regulated industries, announced it has acquired Work Wallet, a UK-based developer of mobile-first environmental, health, and safety (EHS) software. The deal expands Ideagen’s EHS capabilities across EMEA and the Americas, with Work Wallet launching immediately in the Americas as part of Ideagen’s EHS suite (while remaining branded in the UK for a period).
Keyfactor announced its intent to acquire UK-based Cofide, an identity platform that secures software workloads and AI agents across cloud environments. The deal is designed to extend Keyfactor’s Trust Control Plane to cover non-human identities, enabling security teams to manage and govern workload and agent identity at scale.
Carlyle acquired Secturion Systems, a provider of high-speed, NSA-certified hardware encryption solutions based in Centerville, Utah. The transaction represents the first investment by Carlyle’s dedicated middle-market Aerospace, Defense & Government and Industrials platform.
RSE Ventures and Ondas Inc. announced a co-led strategic investment into FPF Defense, a counter-UAS defense technology company developing SmartFlak and its Hammerhead low-cost autonomous interceptor. The investment will support acceleration of development and production, U.S.-based manufacturing with a domestic supply chain, and expanding engineering and headcount, with FPF Defense relocating its headquarters to West Palm Beach.
Coalesce Capital has secured a strategic growth investment in Workstreet, an AI-native cybersecurity and compliance services provider for regulated industries. The deal includes co-investment by Workstreet’s founders and management team as the company enters its next phase of hypergrowth, with proceeds intended for talent, technology, and go-to-market expansion.
Genki, an international health insurer for digital nomads and expatriates, acquired Cologne-based insurtech startup Wave Claims and its Claim OS software. The deal is intended to bring specialized AI-driven insurance claims and expertise in-house, automating document-intensive claims processing and helping improve submission, fraud detection, and product development.
NINJIO announced its acquisition of SafeStack, a developer security and application security training platform that powers NINJIO Secure Code. The deal expands NINJIO’s human risk management offering beyond employee awareness and phishing simulations into the software development lifecycle, enabling integrated workforce and developer secure coding education.
FalconX acquired bloXroute, a blockchain networking and trading connectivity infrastructure provider, to strengthen FalconX’s onchain capital markets platform. The deal combines bloXroute’s low-latency blockchain networking layer with FalconX’s institutional trading and prime brokerage capabilities to improve onchain execution speed and efficiency for tokenized assets.
Verdane agreed to acquire majority ownership stakes in four technology businesses from Trifork Labs, the R&D/venture arm of Trifork Group. The portfolio includes Axoniq, Dawn Health, Frameo, and XCI, with Verdane acquiring 52% of the combined book value for a total cash consideration of EUR 22.8 million plus earnout payments.
Cribl, the AI platform for telemetry, announced it is acquiring CardinalOps, an agentic detection engineering company. The deal expands Cribl’s AI Platform for Telemetry into security operations by adding detection engineering capabilities that help SOC teams improve threat coverage, validate detections, and reduce data/alert costs while offering a more flexible path away from legacy SIEM architectures.
Barracuda Networks has acquired Evo Security, an identity and access management (IAM) provider built specifically for managed service providers (MSPs). The deal aims to embed Evo Security’s IAM and privileged access management capabilities into Barracuda’s BarracudaONE platform to create a unified, end-to-end identity resilience stack for MSPs.
CyberNut, a cybersecurity awareness platform built exclusively for K-12 school districts, acquired the Neptune Navigate digital citizenship curriculum/platform. The deal expands CyberNut’s offering by adding a student-focused, purpose-built curriculum that complements its staff phishing simulations, security awareness training, and threat reporting. Financial terms were not disclosed.
Databarracks acquired the assets of Acumen Business Services Ltd, a business continuity and resilience consultancy. The acquisition is intended to strengthen Databarracks’ Business Resilience Managed Services and unified business and technology resilience offering.
Redwood AI Corp. entered into a share purchase agreement to acquire Quantum.IQ Technologies Inc., acquiring all issued and outstanding shares. The deal is designed to expand Redwood’s AI and computational technology platform into quantum-resistant cybersecurity, cryptographic intelligence, and enterprise security infrastructure modernization.
Volaris Group acquired SureView Systems, a Tampa-based provider of enterprise security monitoring, analysis, and response across physical and cyber domains. SureView’s “single pane of glass” platform ingests security data such as video and access control to support mission-critical security operations, and it will continue operating independently within Volaris’ Security Portfolio.
Incode Technologies has completed its acquisition of Identiq, a provider of privacy-enhancing cryptographic technology for peer-to-peer anti-fraud collaboration. The deal expands Incode’s privacy-by-design identity verification platform with Identiq’s patented ability to share fraud signals without exposing sensitive customer data.
onsemi and Synaptics announced they entered into a definitive agreement for onsemi to acquire Synaptics in an all-stock deal valued at approximately $7 billion. Synaptics stockholders will receive 1.350 shares of onsemi common stock for each Synaptics share, and Synaptics stockholders are expected to own about 12% of the combined company on a fully diluted basis.
Booz Allen Hamilton completed its $720 million acquisition of Ultra I&C Mission Solutions (Ultra Mission Solutions) from Cobham Ultra Group, an Advent portfolio company. The deal expands Booz Allen’s defense technology platform with Ultra’s mission-critical software, encryption, and edge-compute capabilities, which will be integrated into Booz Allen’s defense technology business.
Accenture has entered into agreements to acquire a majority stake in OT cybersecurity company Dragos and 100% of runZero and NetRise. The combined transactions are valued at approximately $4.175 billion and are expected to close in August or September 2026, pending regulatory approvals. The acquisitions are intended to expand Accenture’s OT cybersecurity position from services into software and create a unified xOT security platform combining threat detection, exposure assessment, and firmware/software supply-chain visibility.
Cisco announced its intent to acquire WideField Security, a security technology company focused on protecting identities in the agentic AI era. WideField’s technology is expected to be integrated into Splunk to enhance Agentic SOC capabilities by normalizing and correlating identity, session, and activity telemetry from multiple sources.
EigenQ and Silicon Valley Acquisition Corp. (SVAQ) entered into a definitive business combination agreement to take EigenQ public in a transaction valued at approximately $3 billion pro forma enterprise value. The combined company is expected to trade on Nasdaq under the ticker symbol EIGQ, with a planned close in the fourth quarter of 2026, subject to shareholder approval and SEC review.
CertifID, a platform for real estate wire fraud prevention, announced it has acquired CloseSimple, a closing communication and automation platform used by hundreds of U.S. title companies. The combined offering is intended to deepen integrations with title production systems, accelerate AI use in closing workflows, and provide stronger fraud protection alongside modern closing automation.
Full Export
Get the full acquisitions list for this page as CSV + XLSX.
Find buyers actively acquiring cybersecurity companies.
Identity security and governance, fraud prevention, network intelligence/observability, and managed security services are recurring themes across the listed transactions.
Several buyers appear repeatedly, including CyberMaxx, Cryptomathic, Carlyle Global Credit, Oak Hill Advisors, Owl Rock Capital, Ares Management Credit Funds, Blackstone Credit, and Golub Capital.
No. The page includes activity in the United States, the United Kingdom (including Nottinghamshire), and Canada (British Columbia).
No. Some deals are completed (for example, Infoblox/Kentik), while others are proposed or expected to close in future quarters and are subject to regulatory approvals or customary closing conditions.