Cybersecurity Acquisitions in Pennsylvania

Axiom GRC has acquired IS Partners, a U.S. cyber assurance and compliance services provider, to accelerate its North American expansion and broaden its cyber assurance and compliance offerings. IS Partners—headquartered in the Philadelphia area—serves roughly 600 customers with recurring audits across frameworks such as SOC 1/2, ISO 27001, HITRUST, HIPAA, PCI DSS and CMMC; the deal is Axiom's first U.S.-headquartered acquisition and its fifth since partnering with Inflexion.

Bugcrowd has acquired Mayhem Security, an AI offensive security pioneer founded by Carnegie Mellon researchers, to integrate Mayhem's autonomous testing and reinforcement-learning capabilities into Bugcrowd's crowdsourced security platform. The acquisition (terms not disclosed) will combine Bugcrowd's hacker community with Mayhem's AI-driven offensive testing to deliver continuous, human-in-the-loop security across development and production; Dr. David Brumley will join Bugcrowd as Chief AI and Science Officer.

C2A Security has acquired Pittsburgh-based Vigilant Ops, a specialist in SBOM automation and product security for MedTech and healthcare customers. The acquisition integrates Vigilant Ops’ SBOM and compliance capabilities into C2A’s AI-driven product security orchestration platform to accelerate MedTech, defense, and telecom market expansion and strengthen regulatory and supply-chain security offerings.

Fortified Health Security, a healthcare-focused managed security service provider (MSSP) based in Brentwood, Tennessee, has acquired Latitude Information Security, a healthcare-focused cybersecurity advisory firm known for HITRUST CSF, risk assessments and third‑party risk management. The acquisition brings Latitude under the Fortified brand, expands Fortified’s advisory and HITRUST capabilities, and adds a Philadelphia presence; Latitude’s CEO Mark Ferrari will lead a new Risk and Governance Services division within Fortified.

Darktrace has acquired Mira Security, a provider of network traffic visibility and in-line decryption capabilities, to strengthen its network detection and response product. Mira Security’s engineering teams in South Africa and the United States will join Darktrace R&D to accelerate development of higher-performance hardware, improved encrypted-traffic visibility, and enhanced decryption for regulated industries.

Nautic Partners has completed the acquisition of AccessIT Group as a new platform investment, closing on July 8, 2025. AccessIT Group, a King of Prussia, Pennsylvania–based cybersecurity solutions provider, will remain led by CEO Joe Luciano while co-founder David Hark retires; Nautic will support expansion of the firm's capabilities and geographic reach.

Business Communications, Inc. (BCI) has acquired Trustlink Technologies, a Harrisburg, Pennsylvania-based cybersecurity services and Fortinet partner. The deal expands BCI's cybersecurity capabilities and East Coast footprint while adding Trustlink's network security engineering expertise and Fortinet specializations to BCI's platform.

Crane NXT, Co. has signed a definitive agreement to acquire OpSec Security from Investcorp Technology Partners for $270 million in cash (subject to customary adjustments). The acquisition — which excludes Zacco, retained by Investcorp — expands Crane NXT's physical and digital authentication and brand-protection capabilities; OpSec expects roughly $130 million in revenue for fiscal 2024.

Netrix, LLC has acquired BTB Security, a Philadelphia-area provider of managed cybersecurity, digital forensics, and CISO advisory services, to expand Netrix’s managed security portfolio and Mid-Atlantic presence. BTB’s founding partners have taken roles within Netrix to support integration and growth; financial terms were not disclosed.

Immersive Labs has acquired Pennsylvania-based Snap Labs to integrate hyper-realistic, multi-player cyber simulation capabilities into its platform. The deal brings Snap Labs' cloud-based, environment-specific lab and crisis-exercise technology into Immersive Labs to deepen its cyber training realism and broaden capabilities for technical and executive teams.

Sverica Capital Management, a Boston-based private equity firm, has made a strategic growth investment in DeFY Security, a cybersecurity solutions provider based near Pittsburgh, Pennsylvania. The investment will support DeFY's continued growth and national expansion while DeFY's founder and CEO Justin Domachowski remains in place and Sverica partners join the company's board.

Accenture LLP has acquired 100% of the membership interests of Revolutionary Security LLC, a Philadelphia-area cybersecurity consultancy that specializes in IT and OT security, breach and attack simulation, and security operations. The deal will expand Accenture Security's capabilities, particularly for industrial and critical infrastructure clients across energy, manufacturing, healthcare and financial services.

Trustwave has acquired BitArmor, a provider of data encryption solutions, and will integrate BitArmor's SmartTag persistent file encryption and full-disk encryption technology into Trustwave's endpoint security and DLP offerings. Financial terms were not disclosed; BitArmor's CEO Patrick McGregor will remain with the company following the acquisition.