Cybersecurity Acquisitions in New York

Sole Source Capital LLC has acquired Brite, a cybersecurity and managed IT services provider headquartered in Victor, New York, marking Sole Source's first platform investment from SSC Partners Fund III. The deal positions Brite as a buy-and-build platform to pursue consolidation in the fragmented cybersecurity managed services market; financial terms were not disclosed and Brite's existing management team will remain in place.

MorganFranklin Cyber, a PE-backed cybersecurity advisory and managed services firm, has acquired Lynx Technology Partners to expand its cybersecurity, risk management, and business development capabilities. As part of the deal, Lynx founder Aric K. Perminter joins MorganFranklin Cyber as Managing Director, Client Relations to support integration and client growth.

Zscaler, Inc. has acquired AI security pioneer SPLX to extend the Zscaler Zero Trust Exchange with AI asset discovery, automated red teaming, runtime guardrails, and governance across the AI lifecycle. The deal integrates SPLX's technology for discovery, risk assessment and remediation into Zscaler's cloud security platform to help enterprises secure models, agent workflows, and RAG pipelines from development through deployment.

JumpCloud has acquired Breez, an Identity Threat Detection, Investigation and Response (ITDR) platform, to bolster its identity security and accelerate its product roadmap. The acquisition brings Breez's specialized ITDR technology and team into JumpCloud's unified identity, device, and access management platform; transaction terms were not disclosed.

CyberRisk Alliance has acquired Execweb, a boutique executive-level marketplace that connects cybersecurity vendors with CISOs and security leaders. Execweb will operate as a wholly owned subsidiary of CRA, expanding CRA's executive engagement and demand-generation capabilities across its media, research, and events portfolio.

Google LLC has signed a definitive agreement to acquire Wiz, Inc., a New York–based cloud security platform, in an all-cash transaction valued at $32 billion subject to closing adjustments. The deal expands Google Cloud's security capabilities and accelerates its strategy to deliver improved cloud and multicloud security solutions to enterprise customers.

CyberMaxx, a portfolio company of Periscope Equity, acquired Cybersafe Solutions to expand its managed detection and response (MDR) capabilities. Comvest Credit Partners provided a senior secured credit facility to CyberMaxx to support the refinancing and fund the strategic add-on acquisition of Cybersafe.

Haveli Investments, an Austin-based technology-focused private equity firm, has completed a majority acquisition of AppViewX, a New York–headquartered provider of automated certificate lifecycle management (CLM) and PKI SaaS solutions. The investment will provide capital and operating expertise to accelerate AppViewX’s product innovation, go-to-market expansion, and global growth; terms were not disclosed.

SecureAuth has acquired SessionGuardian to integrate its biometric continuous identity assurance (BCIA) technology into SecureAuth’s identity and access management (IAM/CIAM) portfolio. SessionGuardian’s team and technology will be incorporated to provide continuous biometric protection for user sessions beyond initial login, strengthening SecureAuth’s offerings for regulated end markets such as legal services, financial services, and healthcare.

RKON Technologies has acquired Bridge Security Advisors to expand its cloud security, governance-risk-and-compliance (GRC), and identity & access management capabilities for regulated industries including healthcare, finance, and manufacturing. The deal — fueled by RKON's recent private equity backing from Post Capital Partners LLC — will integrate Bridge's team and services under the RKON brand; financial terms were not disclosed.

Leeds Equity Partners has acquired OffSec, a provider of hands-on cybersecurity workforce training and professional education, from Spectrum Equity. The transaction will support OffSec's expansion of enterprise relationships and investments in content, technology, and education solutions; terms were not disclosed.

TAM-C Intelligence Central has acquired New York City–based Impera Intelligence Group, integrating Impera as a wholly owned subsidiary to expand TAM-C’s cyber, intelligence and investigative capabilities. Impera’s New York operation will be a domestic center for the combined company and its team and advisory board — drawn from former federal law enforcement and intelligence communities — will continue under TAM-C ownership.

Permira Growth Opportunities II, advised by Permira, agreed to acquire a majority stake in behavioral-biometric fraud-detection firm BioCatch in a secondary transaction valuing the company at $1.3 billion. Existing investors Sapphire Ventures and Macquarie Capital are increasing their investments, while shares were bought primarily from Bain Capital Tech Opportunities and Maverick Ventures to support BioCatch's global expansion, product roadmap and continued growth.

BeyondTrust has agreed to acquire Entitle, a provider of just‑in‑time (JIT) access and cloud permissions management, bringing Entitle's products, employees, customers, and IP into the BeyondTrust Privileged Identity Security platform. The acquisition expands BeyondTrust's capabilities in privileged access management (PAM), cloud infrastructure entitlement management (CIEM) and identity governance (IGA), enabling unified orchestration of dynamic, time‑bounded access across cloud, SaaS and on‑prem environments.

Cloud security vendor Wiz has acquired New York-based cloud detection and response startup Gem Security to strengthen its real-time detection and response capabilities. Financial terms were not disclosed (reports peg the price around $350 million), and Gem's founding team will join Wiz's executive team.

San Diego-based cybersecurity provider DeepSeas has acquired GreyCastle Security, a Troy, New York–based cybersecurity professional services firm. The deal expands DeepSeas' advisory, audit-readiness, and incident response capabilities — strengthening its prepare/prevent/protect service framework and enabling packaged compliance offerings for midmarket clients.

Dataprise has acquired the clients and employees of Cohere, a New York City–based security-first managed services provider, expanding Dataprise's operations in New York City and strengthening its financial services and regulated-industry capabilities. Dataprise, a portfolio company of Trinity Hunt Partners, will integrate Cohere's more than 150 client relationships into its nationwide managed IT, cybersecurity, cloud, and data protection offerings.

First Advantage Corporation (NASDAQ: FA) has acquired Infinite ID, a U.S.-based digital identity authentication company and portfolio company of Enlightenment Capital, in an all-cash transaction valued at $41 million. The deal expands First Advantage's digital identity and authentication capabilities in the United States by integrating Infinite ID's biometric and identity solutions into its screening and identity product portfolio.

Rubrik has signed an agreement to acquire Laminar, a leading data security posture management (DSPM) platform, to unify cyber recovery and cyber posture across enterprise, cloud, and SaaS. Terms were not disclosed; Rubrik said it will onboard the Laminar team and use it to open an R&D center in Tel Aviv to accelerate cloud data security innovation.

CyberRisk Alliance (CRA) acquired the assets of the KNOW Identity conference from New York-based advisory firm Liminal. CRA said the purchase and a strategic partnership with Liminal will expand the Identiverse franchise through new program tracks, speakers and platform extensions to better serve the digital identity and cybersecurity community.

Periscope Equity portfolio company CyberMaxx has acquired CipherTechs to expand its suite of cybersecurity services, combining offensive, defensive, DFIR, and GRC capabilities. CyberMaxx also announced the appointment of Brian Ahern as CEO as the combined business targets broader growth across regulated industries.

Abacus Group has acquired boutique cybersecurity consulting firm Gotham Security and its parent company GoVanguard to expand its security services and accelerate the firm's transition from an MSP to a full MSSP. Gotham Security will operate as a subsidiary under Abacus Group, bringing capabilities such as penetration testing, red teaming, threat intelligence, and other advisory services to Abacus's financial-services-focused client base.

Volaris Group, an operating group of Constellation Software Inc., completed the acquisition of the former Cognyte Situational Intelligence Solutions (SIS) business and relaunched it under the new brand Intellicene. The company, headquartered in Melville, New York, will continue to develop and commercialize the Symphia situational-intelligence platform with renewed leadership and support from Volaris to accelerate growth and market expansion.

Enlightenment Capital-backed Infinite ID, a newly branded identity software and biometric solutions provider, has acquired PrintScan, a fingerprinting and identity management company. The transaction positions Infinite ID to expand its biometric capabilities and pursue growth in federal, state and local government identity and background-check markets.

SecurityScorecard has acquired LIFARS, a digital forensics, incident response and cyber resiliency services firm, integrating LIFARS as a new DFIR practice within SecurityScorecard's Professional Services group. More than 50 LIFARS employees join SecurityScorecard immediately, with LIFARS CEO Ondrej Krehel leading the new practice to expand SecurityScorecard's pre- and post-breach capabilities.

Spotlight Equity Partners has acquired Pharos Systems International, a Rochester, New York–based provider of cloud-native, zero-trust print infrastructure software. The acquisition adds Pharos’s enterprise-scale PrintOps and secure cloud printing capabilities to Spotlight’s software-focused portfolio.

CyberRisk Alliance has acquired After Nines Inc., the operator of digital information brands ChannelE2E and MSSP Alert, expanding CRA's portfolio of cybersecurity-focused media and intelligence services. Co-founders Amy Katz and Joe Panettieri will join CyberRisk Alliance in their existing roles; transaction terms were not disclosed.

Computer Design & Integration LLC (CDI) has acquired SecOps Partners, a Rochester, New York–based ServiceNow Security Operations and Integrated Risk Management (IRM) services firm. The deal expands CDI's ServiceNow security and governance, risk and compliance (GRC) capabilities and will make SecOps Partners' services immediately available to CDI customers; financial terms were not disclosed.

Audax Private Equity acquired a majority stake in Flashpoint, a New York–based provider of actionable threat intelligence and intelligence automation, in July 2021. Terms were not disclosed; Audax said the investment will support Flashpoint’s product development, organic growth and buy‑and‑build/inorganic expansion to broaden its cyber intelligence capabilities and customer reach across commercial and government markets.

Sophos has acquired Capsule8, a New York–based provider of runtime visibility, detection and response for Linux servers and cloud containers, to strengthen its Adaptive Cybersecurity Ecosystem (ACE). Capsule8's Linux-optimized runtime security will be integrated into Sophos' XDR, Intercept X server products and managed services to expand server and cloud workload protection.

Barracuda Networks has acquired SKOUT Cybersecurity, a Melville, New York-based provider of an XDR platform and 24x7 SOC services optimized for Managed Service Providers (MSPs). The deal, announced in July 2021 and completed July 13, 2021, expands Barracuda's MSP-focused security portfolio by adding SKOUT's XDR technology and managed detection-and-response capabilities; terms were not disclosed.

Amazon Web Services (AWS) has acquired Wickr, a provider of end-to-end encrypted messaging, voice and video communications used by enterprise and public sector customers. The acquisition brings Wickr's secure communications capabilities into AWS's portfolio to support security-conscious organizations and government agencies; Wickr services are being offered through AWS effective immediately.

Synopsys, Inc. acquired Code Dx, an application security risk management vendor based in Northport, New York, to extend Synopsys' application security portfolio and provide consolidated vulnerability aggregation, correlation, and prioritization across multiple testing tools. The deal adds Code Dx's R&D team and technology into Synopsys' Software Integrity Group to improve risk reporting and DevSecOps orchestration.

Pindrop has acquired Next Caller, a New York–based provider of enterprise call verification and fraud-detection technology, with Next Caller operating as a wholly owned subsidiary. The deal expands Pindrop's voice-security and authentication offering for contact centers, combining Next Caller's VeriCall capabilities with Pindrop's fraud prevention and voice-authentication platform to accelerate growth and broaden customer coverage.

Offensive Security has acquired VulnHub, the open-source catalog of legally exploitable virtual machines and training resources for penetration testers. VulnHub’s content will remain freely available as part of OffSec’s commitment to community-driven, hands-on cybersecurity training and education.

Ankura acquired UnitedLex’s Managed Detection and Response (MDR) business to expand its cybersecurity and privacy capabilities. The transaction transfers the MDR team, including leadership and global SOC resources, into Ankura to provide 24/7 threat detection and response services to Ankura clients.

Zoom Video Communications acquired Keybase, a secure messaging and file-sharing team, to accelerate development of an enterprise-scale end-to-end encryption offering. The Keybase engineering team joined Zoom's security organization to help implement encryption at Zoom scale; terms were not disclosed.

Five Points Capital, alongside co-investors Pleasant Bay Capital, Crescendo Capital and Capital Southwest Corporation and new CEO Mike Dager, completed a recapitalization of GrammaTech, a developer of software-assurance tools and application-security solutions. The transaction establishes a new leadership team (Mike Dager as CEO) and positions GrammaTech to expand in the growing application-security market serving government and commercial clients.

CyberRisk Alliance (backed by Growth Catalyst Partners) has acquired SC Media, the longtime cybersecurity publishing and events brand, from Haymarket Media, Inc. The deal expands CyberRisk Alliance’s portfolio of cybersecurity-focused business intelligence products and events as part of its rapid roll-up strategy in the information risk marketplace.