Tracked deals
97
97 tracked deals across 2004-2026.
Tracked deals
97
97 tracked deals across 2004-2026.
Buyer mix
Mixed buyer set
72 strategic · 52 pe
Top trend
Volume peaked in 2024
19 tracked deals announced in 2024.
Primary Insight
Build a buyer list for your Cybersecurity deal
Find buyers actively acquiring cybersecurity companies.
Find buyers like these for your dealBuyer Snapshot
Illustrative buyers pulled from tracked transactions on this page. This table is capped and intentionally non-exhaustive.
| Buyer | # Deals | Focus | Type |
|---|---|---|---|
| ABS Capital Partners | 2 | Growth equity investor focused on later-stage B2B softwar... | PE |
| Accenture | 2 | Global professional services and consulting firm providin... | Strategic |
| Arlington Capital Partners | 2 | Washington, D.C.-area private investment firm specializin... | PE |
| CACI International Inc. | 2 | Large public government and national-security contractor ... | Strategic |
| Enlightenment Capital | 2 | Private investment firm providing flexible capital and st... | PE |
| Godspeed Capital Management LP | 2 | Lower middle-market private equity firm focused on Defens... | PE |
| Gryphon Investors | 2 | Middle-market private equity firm focused on scaling tech... | PE |
| NetSPI | 2 | Provider of enterprise penetration testing, attack surfac... | Strategic (PE-backed) |
| SilverEdge Government Solutions | 2 | Provider of cybersecurity, software, and intelligence sol... | Strategic (PE-backed) |
| The Carlyle Group | 2 | Global investment firm deploying private capital across p... | PE |
Last 10 years
Supporting Data
Cycurion, Inc. (NASDAQ: CYCU) has entered into a binding agreement to acquire Halo Privacy and integrate HavenX to expand its AI-driven secure communications and cyber defense platform. The company expects to close within about 45 days and is targeting a broader market beyond U.S. government and enterprise into retail consumer use cases.
Fortreum, a cybersecurity assessment and advisory firm, announced the acquisition of Kovr.AI, an AI-native compliance platform built for highly regulated organizations. The combined offering pairs Fortreum’s practitioner-led cybersecurity compliance assessments with Kovr.AI’s FedRAMP-authorized, agentic AI platform covering frameworks including FedRAMP, CMMC 2.0, DOD SRG, NIST CSF 2.0, and GovRAMP.
ControlCase, a provider of cybersecurity certification and continuous compliance services, has acquired CyberNINES, a CMMC-focused cybersecurity assessor and advisory firm serving the Defense Industrial Base. The deal expands ControlCase’s ability to deliver end-to-end federal compliance services, including C3PAO-led certification assessments, readiness/gap analysis, mock assessments, and continuous compliance.
Veros Technologies, a portfolio company of Razor's Edge, has announced its acquisition by Quantum Leap, a portfolio company of Carlyle. Terms of the transaction were not disclosed. Veros provides advanced cyber and operational capabilities to U.S. Government customers, particularly within the Intelligence Community.
Gryphon Investors has completed a majority growth recapitalization of Fortreum, a Lansdowne, Virginia-based cybersecurity services firm specializing in compliance, audit, and technical testing including FedRAMP, CMMC, ISO, PCI, and SOC. The investment will fund expansion of Fortreum's offerings and accelerate development and adoption of its XRAMP continuous validation platform and AI-enabled capabilities; company founders will retain a significant equity stake. Financial terms were not disclosed.
Red River has acquired Invictus, a national security services provider specializing in cyber, intelligence and enterprise modernization, to strengthen its Government Technology Systems capabilities. Invictus will operate as "Invictus, a Red River Company," bringing talent and mission-focused capabilities that expand Red River's AI-enabled cybersecurity and national security modernization offerings to Department of Defense, Intelligence Community and federal civilian customers.
Woven Solutions, a Reston, Virginia-based provider of AI-enabled mission software, has acquired Cystemic Security to expand its cyber forensics and managed attribution capabilities. The deal — Woven's first acquisition after a strategic investment from Falfurrias Management Partners — strengthens its ability to deliver end-to-end cyber tooling and managed attribution solutions for U.S. national security and intelligence customers.
TekSynap Corporation has completed the acquisition of JBA, Inc., a veteran-owned technology engineering firm that provides cyber operations and specialized IT services supporting the Federal Bureau of Investigation. The deal expands TekSynap’s mission portfolio and footprint across FBI programs and federal mission locations, adding capabilities in cyber operations, systems engineering, network engineering, cloud and software development.
V2X completed its acquisition of QinetiQ’s U.S. Intelligence business, which provides data engineering, intelligence mission support, and cyber solutions for the Intelligence Community. The transaction is valued at approximately $24 million net of estimated tax benefits and adds about 70 skilled professionals to V2X.
Cyberbit has acquired RangeForce, combining two leading cyber range and training platforms to create an AI-powered operational cyber readiness offering for enterprises and governments. The deal is backed by Cyberbit's financial sponsors, Charlesbank Capital Partners and Claridge, and RangeForce will operate as a wholly owned subsidiary of Cyberbit.
Funds managed by global investment firm Carlyle completed a growth investment in Quantum Leap, a Leesburg, Virginia-based provider of cybersecurity and intelligence solutions for U.S. government customers. Management (including founder and CEO Jim Miller), Razor's Edge, and other existing shareholders reinvested alongside Carlyle to support the company's continued growth and capability expansion in national security markets.
Sphinx has acquired Enigma International to strengthen its counterintelligence, language and systems capabilities and accelerate deployment of its AxIS advanced intelligence and security product line. The deal expands Sphinx’s access to federal contracting vehicles such as GSA OASIS+ and DIA DLITE II and enhances support for defense and commercial security customers.
Magnet Forensics has acquired Dark Circuit Labs, a U.S.-based offensive cybersecurity firm specializing in vulnerability research and exploit development. The deal expands Magnet Forensics' vulnerability research capabilities and strengthens its ability to support U.S. federal and national security customers.
Securonix has acquired ThreatQuotient to integrate ThreatQuotient's ThreatQ threat intelligence platform with Securonix's agentic AI-driven SIEM, creating a unified platform for threat detection, investigation, and response. The combination aims to reduce mean time to respond, cut false positives, and accelerate product roadmap innovations while allowing ThreatQuotient to continue operating as a standalone offering.
Leidos has acquired Kudu Dynamics for approximately $300 million in an all-cash transaction that closed May 23, 2025. The acquisition is intended to accelerate Leidos' AI-enabled offensive cyber, electromagnetic spectrum operations, and vulnerability research capabilities for defense, intelligence and homeland security customers.
Cognyte Software Ltd. (NASDAQ: CGNT) has acquired GroupSense, a U.S.-based digital risk protection and cyber threat intelligence services provider, for approximately $4 million plus up to $5 million in earnout. The purchase expands Cognyte's investigative-analytics capabilities and advances its growth strategy and footprint in the United States.
Vibrint has acquired Ampsight, a Sterling, Virginia-based provider of multi-cloud engineering, cybersecurity, and AI/ML solutions for federal agencies. The deal expands Vibrint's capabilities in cloud, cyber, explainable AI and geospatial intelligence while extending its footprint into Northern Virginia and new federal customer communities.
Tyto Athene, a federal systems integrator and portfolio company of Arlington Capital Partners, has acquired stackArmor, a provider of FedRAMP, FISMA/RMF and CMMC/DFARS compliance acceleration, cloud and security automation solutions. The acquisition will make stackArmor a wholly-owned subsidiary of Tyto and expand Tyto's cloud, cyber automation and compliance capabilities for defense, national security and other regulated federal customers.
Nightwing, the intelligence solutions company headquartered in Dulles, Virginia, has acquired Roka Security, a Herndon-based cybersecurity specialist with expertise in infrastructure-as-code, data center operations, secure data transport, and technical training. The deal strengthens Nightwing’s cyber, collection, and communications capabilities for government and commercial clients and enables expanded offerings including Data-as-a-Service.
OPSWAT has acquired Fend Incorporated, a data diode and unidirectional gateway technology provider headquartered in Arlington, Virginia, to expand its OT and critical-infrastructure cybersecurity product portfolio. The deal strengthens OPSWAT’s capabilities in secure one-way data transfer for government, utilities, energy, and industrial customers and was facilitated by M&A advisor Trafalgar Capital Partners.
SIXGEN, a mission-focused cyber solutions provider backed by Washington Harbour Partners, has acquired Kyrus Tech, a specialized software development and reverse-engineering firm serving the U.S. intelligence and defense communities. The add-on strengthens SIXGEN's engineering capabilities (adding ~80 engineers) and expands its mission-focused product and services portfolio for national security and critical infrastructure customers.
ID.me closed a $67 million secondary tender offer led by new investor Ribbit Capital with participation from existing investors Viking Global Investors and CapitalG. The transaction provides liquidity to existing shareholders while bringing in institutional investors to support the company’s continued growth; ID.me is headquartered in McLean, Virginia and has enrolled over 135 million users into its digital identity wallet.
CoreStack Inc., an AI-powered multi-cloud governance platform based in Bellevue, Washington, has acquired Karthik Consulting LLC, a Virginia-based federal IT and cybersecurity systems integrator. The deal brings Karthik Consulting's cATO and DevSecOps capabilities and ~125 security-focused professionals into CoreStack to accelerate the company's expansion into the U.S. federal market and bolster its cloud-security offerings.
CACI International has acquired Reston, Virginia-based cloud, data and cybersecurity firm Applied Insight from private equity owner Acacia Group in an all-cash transaction. The deal adds Applied Insight’s cloud migration, secure networking and infrastructure modernization capabilities—and its government/DoD and Intelligence Community relationships—to CACI’s portfolio, strengthening the buyer’s cloud and cyber offerings for defense and national security customers.
Falfurrias Management Partners has made a growth equity investment in MOXFIVE, a cybersecurity incident response and resilience company founded in 2019 by Mike Wager. The investment will provide capital and board-level support to scale MOXFIVE's incident response operations and proprietary MOXFIVE Platform while CEO Mike Wager remains in place.
DigiCert, backed by Clearlake Capital, Crosspoint Capital and TA Associates, has completed its acquisition of Vercara from Golden Gate Capital and GIC. The deal brings Vercara's managed authoritative DNS, DDoS, WAF and edge security capabilities into DigiCert's digital-trust and PKI platform to offer unified DNS and certificate management; terms were not disclosed.
Parsons Corporation has entered into a definitive agreement to acquire BlackSignal Technologies, LLC from Razor's Edge Management, LLC for $200 million in cash. The deal — expected to close in August 2024 — will integrate BlackSignal into Parsons' Defense & Intelligence business unit and expand Parsons' electronic warfare, cyber, and AI/ML-enabled signal processing capabilities for Department of Defense and Intelligence Community customers.
Acacia Group portfolio company MajorKey Technologies has merged with Clango to form an expanded identity security provider serving enterprise and public sector customers. The combined company — operating under the MajorKey brand over time — brings together complementary Identity and Access Management and Privileged Access Management capabilities and a team of more than 200 identity specialists to broaden service offerings and scale the platform.
NetSPI, a KKR-backed proactive security platform, has acquired Hubble Technology, a Northern Virginia-based provider of agentless CAASM and cyber posture management (Aurora). Hubble founder Tom Parker will join NetSPI as Chief Technology Officer as NetSPI integrates Hubble's CAASM capabilities into its platform to deliver unified EASM and CAASM functionality.
Chenega Corporation, an Alaska Native government services contractor, has acquired SecuriGence LLC, a Washington, D.C. metro–based cybersecurity and systems engineering firm. The acquisition expands Chenega’s Military, Intelligence and Operations Support (MIOS) capabilities and adds technical cybersecurity, systems engineering, and cloud capabilities to support additional Defense and federal intelligence customers.
Tyto Athene, an Arlington Capital Partners portfolio company, has acquired MindPoint Group, a provider of end-to-end managed cybersecurity services to U.S. federal agencies. The deal closed on June 30, 2024; MindPoint's president, Patti Chanthaphone, will lead Tyto's Federal Civilian Group to expand the company's cyber capabilities and federal civilian/law enforcement footprint.
BV Investment Partners has made a majority investment in CyberSheath, a Reston, Virginia-based managed compliance, security, and IT provider serving the U.S. Defense Industrial Base. The transaction represents Lightview Capital’s sale of the company, and BV said it will support CyberSheath’s continued growth across CMMC compliance, managed security services, and related IT offerings.
CASE, a portfolio company of private equity firm AE Industrial Partners, has acquired CyberKinetics, a Herndon, Virginia-based cloud and cyber services provider focused on federal and national security customers. The deal (terms undisclosed) adds cloud, DevOps, data engineering and IT infrastructure planning capabilities to CASE and is intended to provide scale to pursue larger contracts; CyberKinetics’ management will remain with the combined organization.
Risk Mitigation Consulting (RMC) has acquired Alexandria-based cybersecurity services firm Securicon to broaden RMC's IT and OT cybersecurity, device penetration testing, and energy-sector capabilities. The deal expands RMC's government and commercial critical-infrastructure offerings and strengthens its mission assurance and risk management portfolio.
Godspeed Capital-backed intelligence, AI/ML and data analytics platform Crimson Phoenix has acquired TekMasters and Seaford Consulting as add-ons to its platform. The acquisitions expand Crimson Phoenix's presence and capabilities in the U.S. Intelligence Community and add highly cleared cyber and IT specialists to the platform.
McNally Capital portfolio company Xcelerate Solutions has merged with VMD Corp, a cybersecurity, agile engineering, and critical infrastructure protection firm based in Fairfax, Virginia. The combined company will operate as Xcelerate Solutions and brings together more than 1,000 technology professionals to expand capabilities and contracts across the federal, defense, law enforcement, and national security markets.
Option3, a cybersecurity-focused private equity firm, launched a Zero Trust cybersecurity platform and announced an agreement for the platform to acquire Onclave Networks, subject to shareholder approval. The acquisition of Onclave — the first of a planned series of deals targeting the federal government and adjacent critical-infrastructure markets — is part of a broader strategy to assemble complementary Zero Trust capabilities onto a single platform, with Option3 expecting total platform M&A to exceed $100M in the coming year.
Acclaim Technical Services (ATS) has acquired Alder Technology Inc., a provider of mission IT services including network engineering, network security and data management that supports the U.S. Intelligence Community. DLA Piper advised Alder on the transaction; the acquisition expands ATS’s mission IT and cybersecurity capabilities for federal/intelligence customers.
SonicWall has acquired Solutions Granted, Inc. (SGI), a U.S.-based Managed Security Service Provider (MSSP) that provides SOC-as-a-Service, Managed Detection and Response (MDR) and other managed security services tailored for MSPs and MSSPs. The acquisition expands SonicWall’s partner-focused portfolio with U.S.-based SOC capabilities and recurring managed-security offerings designed to accelerate partner growth and improve automated threat detection and response.
Redhorse Corporation has completed the acquisition of Allied Associates International (A2I), a Gainesville, Virginia-based cybersecurity and engineering firm. The deal adds A2I's cyber data analytics and software development capabilities and nearly 500 technical employees to Redhorse's national security-focused data analytics, engineering, and AI/ML platform.
GuidePoint Security, a Herndon-based cybersecurity solutions provider, closed a growth funding round led by Audax Private Equity with participation from prior investor ABS Capital Partners. The investment will be used to accelerate GuidePoint's U.S. growth and support international expansion; terms were not disclosed.
Converged Security Solutions LLC (CSS) has acquired federal government contractor Solutions By Design II, LLC (SBD) and will integrate SBD into its Evolver operating company. The acquisition expands CSS/Evolver's cybersecurity, application development, and cloud capabilities in the federal market and increases the combined company's annual revenue to over $150 million with nearly 600 staff.
CISO Global, Inc. (NASDAQ: CISO) has acquired SB Cyber Technologies, LLC, a veteran-owned cybersecurity company based in Chesapeake, Virginia, and maker of the CHECKLIGHT endpoint detection and response (EDR) technology. The acquisition makes SB Cyber a wholly owned subsidiary of CISO Global and expands CISO Global’s managed security, EDR and detection-and-response capabilities for enterprise and government clients.
iNovex, a cybersecurity and intelligence platform backed by Enlightenment Capital, has acquired Secure Innovations, a cybersecurity firm serving intelligence and defense customers. Terms were not disclosed; Secure Innovations CEO Doug Jeruzal will remain with the combined business as iNovex expands its defensive cyber, systems security engineering and security automation capabilities.
Reston-based Agile Defense, a portfolio company of Enlightenment Capital, has acquired XOR Security for an undisclosed sum. The acquisition adds XOR's federal-focused cybersecurity engineering, VSOC and DevSecOps capabilities to Agile Defense's suite of digital transformation and cyber services to better serve defense, intelligence and federal civilian customers.
Onfido, a leader in automated identity verification, has acquired Airside Mobile, a privacy-first digital identity sharing technology company. The acquisition — already closed — will integrate Airside's mobile credentialing and shareable digital ID capabilities into Onfido's Real Identity Platform to enable a 'verify once, use anywhere' experience across travel, financial services, and other sectors.
ZeroFox (Nasdaq: ZFOX) has acquired LookingGlass Cyber Solutions, a leader in external attack surface management and threat intelligence, to broaden its external cybersecurity platform. The deal (announced April 17, 2023 and completed April 24, 2023) strengthens ZeroFox’s attack surface management and global threat intelligence capabilities and will integrate LookingGlass leadership into the ZeroFox executive team.
Cherokee Federal, the federal contracting division of Cherokee Nation Businesses, has acquired Criterion Systems, a Vienna, Virginia-based cybersecurity and IT services firm. The deal brings Criterion’s more than 450 professionals and capabilities in cybersecurity, cloud/data center management, IT infrastructure operations and systems engineering into Cherokee Federal to bolster its federal IT and security offerings.
NetSPI acquired nVisium to scale its offensive security and penetration testing capabilities by adding experienced application and cloud pentesting talent. nVisium’s founder Jack Mannino joins NetSPI’s senior leadership as the firms combine to support enterprise clients and expand NetSPI’s human-delivered testing capacity.
Tetra Tech, Inc. has acquired Amyx, Inc., a Reston, Virginia-based enterprise technology, cybersecurity, and management consulting firm. The acquisition expands Tetra Tech's federal IT and cybersecurity capabilities by integrating Amyx's application modernization, cybersecurity, and program management expertise into Tetra Tech's Government Services Group.
Full Export
Get the full acquisitions list for this page as CSV + XLSX.
Find buyers actively acquiring cybersecurity companies.
Recent Virginia acquisitions include cybersecurity compliance and continuous validation platforms, CMMC-focused assessment services, AI-enabled secure communications, cyber ranges/training platforms, and operational cyber/engineering services for federal customers.
The page shows a mix of cybersecurity service and platform companies (e.g., compliance assessors and cyber tooling providers) alongside defense and national security-focused contractors and investment-backed platform builders.
Yes. Many deal descriptions explicitly reference customers such as the Defense Industrial Base, DoD, the Intelligence Community, or federal civilian agencies.
Sometimes. For example, one transaction is described with an approximate value, while several others state that terms were not disclosed.