Cybersecurity Acquisitions in Virginia

Markon, a Sterling Investment Partners portfolio company, has acquired Millennium Corporation to expand full‑spectrum cyber capabilities across defense, intelligence, and federal civilian markets. The deal combines Markon’s enterprise delivery and program execution strengths with Millennium’s adversarial threat emulation, cyber operations, testing, training, and software capabilities as an add‑on to Markon’s platform.

Woven Solutions, a Reston, Virginia-based provider of AI-enabled mission software for national security customers, has acquired Apira Technologies, a developer of AI, computer vision and synthetic media detection tools used in sensitive cyber and information operations. The deal expands Woven’s cyber and information operations capabilities, adds engineering and R&D talent, and increases access to end customers and prime contracts; it is Woven’s second acquisition since receiving a strategic investment from Falfurrias Management Partners in August 2025.

Gryphon Investors has completed a majority growth recapitalization of Fortreum, a Lansdowne, Virginia-based cybersecurity services firm specializing in compliance, audit, and technical testing including FedRAMP, CMMC, ISO, PCI, and SOC. The investment will fund expansion of Fortreum's offerings and accelerate development and adoption of its XRAMP continuous validation platform and AI-enabled capabilities; company founders will retain a significant equity stake. Financial terms were not disclosed.

Red River has acquired Invictus, a national security services provider specializing in cyber, intelligence and enterprise modernization, to strengthen its Government Technology Systems capabilities. Invictus will operate as "Invictus, a Red River Company," bringing talent and mission-focused capabilities that expand Red River's AI-enabled cybersecurity and national security modernization offerings to Department of Defense, Intelligence Community and federal civilian customers.

Woven Solutions, a Reston, Virginia-based provider of AI-enabled mission software, has acquired Cystemic Security to expand its cyber forensics and managed attribution capabilities. The deal — Woven's first acquisition after a strategic investment from Falfurrias Management Partners — strengthens its ability to deliver end-to-end cyber tooling and managed attribution solutions for U.S. national security and intelligence customers.

TekSynap Corporation has completed the acquisition of JBA, Inc., a veteran-owned technology engineering firm that provides cyber operations and specialized IT services supporting the Federal Bureau of Investigation. The deal expands TekSynap’s mission portfolio and footprint across FBI programs and federal mission locations, adding capabilities in cyber operations, systems engineering, network engineering, cloud and software development.

Hexaware Technologies has acquired CyberSolve, a specialist identity and access management (IAM) provider, to expand its AI-led identity security and managed cybersecurity capabilities. The deal combines CyberSolve’s IAM expertise and specialist teams with Hexaware’s global consulting, engineering scale, and 24x7 security operations to accelerate identity modernization, faster onboarding, smoother migrations and continuous compliance for enterprise clients.

Cyberbit has acquired RangeForce, combining two leading cyber range and training platforms to create an AI-powered operational cyber readiness offering for enterprises and governments. The deal is backed by Cyberbit's financial sponsors, Charlesbank Capital Partners and Claridge, and RangeForce will operate as a wholly owned subsidiary of Cyberbit.

Funds managed by global investment firm Carlyle completed a growth investment in Quantum Leap, a Leesburg, Virginia-based provider of cybersecurity and intelligence solutions for U.S. government customers. Management (including founder and CEO Jim Miller), Razor's Edge, and other existing shareholders reinvested alongside Carlyle to support the company's continued growth and capability expansion in national security markets.

Sphinx has acquired Enigma International to strengthen its counterintelligence, language and systems capabilities and accelerate deployment of its AxIS advanced intelligence and security product line. The deal expands Sphinx’s access to federal contracting vehicles such as GSA OASIS+ and DIA DLITE II and enhances support for defense and commercial security customers.

Magnet Forensics has acquired Dark Circuit Labs, a U.S.-based offensive cybersecurity firm specializing in vulnerability research and exploit development. The deal expands Magnet Forensics' vulnerability research capabilities and strengthens its ability to support U.S. federal and national security customers.

Securonix has acquired ThreatQuotient to integrate ThreatQuotient's ThreatQ threat intelligence platform with Securonix's agentic AI-driven SIEM, creating a unified platform for threat detection, investigation, and response. The combination aims to reduce mean time to respond, cut false positives, and accelerate product roadmap innovations while allowing ThreatQuotient to continue operating as a standalone offering.

Leidos has acquired Kudu Dynamics for approximately $300 million in an all-cash transaction that closed May 23, 2025. The acquisition is intended to accelerate Leidos' AI-enabled offensive cyber, electromagnetic spectrum operations, and vulnerability research capabilities for defense, intelligence and homeland security customers.

Cognyte Software Ltd. (NASDAQ: CGNT) has acquired GroupSense, a U.S.-based digital risk protection and cyber threat intelligence services provider, for approximately $4 million plus up to $5 million in earnout. The purchase expands Cognyte's investigative-analytics capabilities and advances its growth strategy and footprint in the United States.

Vibrint has acquired Ampsight, a Sterling, Virginia-based provider of multi-cloud engineering, cybersecurity, and AI/ML solutions for federal agencies. The deal expands Vibrint's capabilities in cloud, cyber, explainable AI and geospatial intelligence while extending its footprint into Northern Virginia and new federal customer communities.

Tyto Athene, a federal systems integrator and portfolio company of Arlington Capital Partners, has acquired stackArmor, a provider of FedRAMP, FISMA/RMF and CMMC/DFARS compliance acceleration, cloud and security automation solutions. The acquisition will make stackArmor a wholly-owned subsidiary of Tyto and expand Tyto's cloud, cyber automation and compliance capabilities for defense, national security and other regulated federal customers.

Nightwing, the intelligence solutions company headquartered in Dulles, Virginia, has acquired Roka Security, a Herndon-based cybersecurity specialist with expertise in infrastructure-as-code, data center operations, secure data transport, and technical training. The deal strengthens Nightwing’s cyber, collection, and communications capabilities for government and commercial clients and enables expanded offerings including Data-as-a-Service.

OPSWAT has acquired Fend Incorporated, a data diode and unidirectional gateway technology provider headquartered in Arlington, Virginia, to expand its OT and critical-infrastructure cybersecurity product portfolio. The deal strengthens OPSWAT’s capabilities in secure one-way data transfer for government, utilities, energy, and industrial customers and was facilitated by M&A advisor Trafalgar Capital Partners.

SIXGEN, a mission-focused cyber solutions provider backed by Washington Harbour Partners, has acquired Kyrus Tech, a specialized software development and reverse-engineering firm serving the U.S. intelligence and defense communities. The add-on strengthens SIXGEN's engineering capabilities (adding ~80 engineers) and expands its mission-focused product and services portfolio for national security and critical infrastructure customers.

ID.me closed a $67 million secondary tender offer led by new investor Ribbit Capital with participation from existing investors Viking Global Investors and CapitalG. The transaction provides liquidity to existing shareholders while bringing in institutional investors to support the company’s continued growth; ID.me is headquartered in McLean, Virginia and has enrolled over 135 million users into its digital identity wallet.

CoreStack Inc., an AI-powered multi-cloud governance platform based in Bellevue, Washington, has acquired Karthik Consulting LLC, a Virginia-based federal IT and cybersecurity systems integrator. The deal brings Karthik Consulting's cATO and DevSecOps capabilities and ~125 security-focused professionals into CoreStack to accelerate the company's expansion into the U.S. federal market and bolster its cloud-security offerings.

Health Catalyst has agreed to acquire all equity interests in cybersecurity provider Intraprise Health for an aggregate purchase price of approximately $43 million, funded with a mix of cash and stock (including ~2,200,490 shares). The acquisition will fold Intraprise’s AI-powered cybersecurity and risk-management platform into Health Catalyst’s Ignite data and analytics ecosystem to expand cybersecurity, third-party risk and resilience capabilities for healthcare customers.

CACI International has acquired Reston, Virginia-based cloud, data and cybersecurity firm Applied Insight from private equity owner Acacia Group in an all-cash transaction. The deal adds Applied Insight’s cloud migration, secure networking and infrastructure modernization capabilities—and its government/DoD and Intelligence Community relationships—to CACI’s portfolio, strengthening the buyer’s cloud and cyber offerings for defense and national security customers.

Falfurrias Management Partners has made a growth equity investment in MOXFIVE, a cybersecurity incident response and resilience company founded in 2019 by Mike Wager. The investment will provide capital and board-level support to scale MOXFIVE's incident response operations and proprietary MOXFIVE Platform while CEO Mike Wager remains in place.

DigiCert, backed by Clearlake Capital, Crosspoint Capital and TA Associates, has completed its acquisition of Vercara from Golden Gate Capital and GIC. The deal brings Vercara's managed authoritative DNS, DDoS, WAF and edge security capabilities into DigiCert's digital-trust and PKI platform to offer unified DNS and certificate management; terms were not disclosed.

Parsons Corporation has entered into a definitive agreement to acquire BlackSignal Technologies, LLC from Razor's Edge Management, LLC for $200 million in cash. The deal — expected to close in August 2024 — will integrate BlackSignal into Parsons' Defense & Intelligence business unit and expand Parsons' electronic warfare, cyber, and AI/ML-enabled signal processing capabilities for Department of Defense and Intelligence Community customers.

Acacia Group portfolio company MajorKey Technologies has merged with Clango to form an expanded identity security provider serving enterprise and public sector customers. The combined company — operating under the MajorKey brand over time — brings together complementary Identity and Access Management and Privileged Access Management capabilities and a team of more than 200 identity specialists to broaden service offerings and scale the platform.

NetSPI, a KKR-backed proactive security platform, has acquired Hubble Technology, a Northern Virginia-based provider of agentless CAASM and cyber posture management (Aurora). Hubble founder Tom Parker will join NetSPI as Chief Technology Officer as NetSPI integrates Hubble's CAASM capabilities into its platform to deliver unified EASM and CAASM functionality.

Chenega Corporation, an Alaska Native government services contractor, has acquired SecuriGence LLC, a Washington, D.C. metro–based cybersecurity and systems engineering firm. The acquisition expands Chenega’s Military, Intelligence and Operations Support (MIOS) capabilities and adds technical cybersecurity, systems engineering, and cloud capabilities to support additional Defense and federal intelligence customers.

Tyto Athene, an Arlington Capital Partners portfolio company, has acquired MindPoint Group, a provider of end-to-end managed cybersecurity services to U.S. federal agencies. The deal closed on June 30, 2024; MindPoint's president, Patti Chanthaphone, will lead Tyto's Federal Civilian Group to expand the company's cyber capabilities and federal civilian/law enforcement footprint.

BV Investment Partners has made a majority investment in CyberSheath, a Reston, Virginia-based managed compliance, security, and IT provider serving the U.S. Defense Industrial Base. The transaction represents Lightview Capital’s sale of the company, and BV said it will support CyberSheath’s continued growth across CMMC compliance, managed security services, and related IT offerings.

CASE, a portfolio company of private equity firm AE Industrial Partners, has acquired CyberKinetics, a Herndon, Virginia-based cloud and cyber services provider focused on federal and national security customers. The deal (terms undisclosed) adds cloud, DevOps, data engineering and IT infrastructure planning capabilities to CASE and is intended to provide scale to pursue larger contracts; CyberKinetics’ management will remain with the combined organization.

Risk Mitigation Consulting (RMC) has acquired Alexandria-based cybersecurity services firm Securicon to broaden RMC's IT and OT cybersecurity, device penetration testing, and energy-sector capabilities. The deal expands RMC's government and commercial critical-infrastructure offerings and strengthens its mission assurance and risk management portfolio.

Godspeed Capital-backed intelligence, AI/ML and data analytics platform Crimson Phoenix has acquired TekMasters and Seaford Consulting as add-ons to its platform. The acquisitions expand Crimson Phoenix's presence and capabilities in the U.S. Intelligence Community and add highly cleared cyber and IT specialists to the platform.

McNally Capital portfolio company Xcelerate Solutions has merged with VMD Corp, a cybersecurity, agile engineering, and critical infrastructure protection firm based in Fairfax, Virginia. The combined company will operate as Xcelerate Solutions and brings together more than 1,000 technology professionals to expand capabilities and contracts across the federal, defense, law enforcement, and national security markets.

Option3, a cybersecurity-focused private equity firm, launched a Zero Trust cybersecurity platform and announced an agreement for the platform to acquire Onclave Networks, subject to shareholder approval. The acquisition of Onclave — the first of a planned series of deals targeting the federal government and adjacent critical-infrastructure markets — is part of a broader strategy to assemble complementary Zero Trust capabilities onto a single platform, with Option3 expecting total platform M&A to exceed $100M in the coming year.

Acclaim Technical Services (ATS) has acquired Alder Technology Inc., a provider of mission IT services including network engineering, network security and data management that supports the U.S. Intelligence Community. DLA Piper advised Alder on the transaction; the acquisition expands ATS’s mission IT and cybersecurity capabilities for federal/intelligence customers.

SonicWall has acquired Solutions Granted, Inc. (SGI), a U.S.-based Managed Security Service Provider (MSSP) that provides SOC-as-a-Service, Managed Detection and Response (MDR) and other managed security services tailored for MSPs and MSSPs. The acquisition expands SonicWall’s partner-focused portfolio with U.S.-based SOC capabilities and recurring managed-security offerings designed to accelerate partner growth and improve automated threat detection and response.

Redhorse Corporation has completed the acquisition of Allied Associates International (A2I), a Gainesville, Virginia-based cybersecurity and engineering firm. The deal adds A2I's cyber data analytics and software development capabilities and nearly 500 technical employees to Redhorse's national security-focused data analytics, engineering, and AI/ML platform.

GuidePoint Security, a Herndon-based cybersecurity solutions provider, closed a growth funding round led by Audax Private Equity with participation from prior investor ABS Capital Partners. The investment will be used to accelerate GuidePoint's U.S. growth and support international expansion; terms were not disclosed.

Converged Security Solutions LLC (CSS) has acquired federal government contractor Solutions By Design II, LLC (SBD) and will integrate SBD into its Evolver operating company. The acquisition expands CSS/Evolver's cybersecurity, application development, and cloud capabilities in the federal market and increases the combined company's annual revenue to over $150 million with nearly 600 staff.

CISO Global, Inc. (NASDAQ: CISO) has acquired SB Cyber Technologies, LLC, a veteran-owned cybersecurity company based in Chesapeake, Virginia, and maker of the CHECKLIGHT endpoint detection and response (EDR) technology. The acquisition makes SB Cyber a wholly owned subsidiary of CISO Global and expands CISO Global’s managed security, EDR and detection-and-response capabilities for enterprise and government clients.

iNovex, a cybersecurity and intelligence platform backed by Enlightenment Capital, has acquired Secure Innovations, a cybersecurity firm serving intelligence and defense customers. Terms were not disclosed; Secure Innovations CEO Doug Jeruzal will remain with the combined business as iNovex expands its defensive cyber, systems security engineering and security automation capabilities.

Reston-based Agile Defense, a portfolio company of Enlightenment Capital, has acquired XOR Security for an undisclosed sum. The acquisition adds XOR's federal-focused cybersecurity engineering, VSOC and DevSecOps capabilities to Agile Defense's suite of digital transformation and cyber services to better serve defense, intelligence and federal civilian customers.

Onfido, a leader in automated identity verification, has acquired Airside Mobile, a privacy-first digital identity sharing technology company. The acquisition — already closed — will integrate Airside's mobile credentialing and shareable digital ID capabilities into Onfido's Real Identity Platform to enable a 'verify once, use anywhere' experience across travel, financial services, and other sectors.

ZeroFox (Nasdaq: ZFOX) has acquired LookingGlass Cyber Solutions, a leader in external attack surface management and threat intelligence, to broaden its external cybersecurity platform. The deal (announced April 17, 2023 and completed April 24, 2023) strengthens ZeroFox’s attack surface management and global threat intelligence capabilities and will integrate LookingGlass leadership into the ZeroFox executive team.

Cherokee Federal, the federal contracting division of Cherokee Nation Businesses, has acquired Criterion Systems, a Vienna, Virginia-based cybersecurity and IT services firm. The deal brings Criterion’s more than 450 professionals and capabilities in cybersecurity, cloud/data center management, IT infrastructure operations and systems engineering into Cherokee Federal to bolster its federal IT and security offerings.

NetSPI acquired nVisium to scale its offensive security and penetration testing capabilities by adding experienced application and cloud pentesting talent. nVisium’s founder Jack Mannino joins NetSPI’s senior leadership as the firms combine to support enterprise clients and expand NetSPI’s human-delivered testing capacity.

Tetra Tech, Inc. has acquired Amyx, Inc., a Reston, Virginia-based enterprise technology, cybersecurity, and management consulting firm. The acquisition expands Tetra Tech's federal IT and cybersecurity capabilities by integrating Amyx's application modernization, cybersecurity, and program management expertise into Tetra Tech's Government Services Group.

Security On-Demand, with backing from Nautic Partners, has acquired Booz Allen Hamilton’s commercial Managed Threat Services (MTS) business and combined it with its operations under the new brand DeepSeas. The combined organization will offer advanced managed detection, threat intelligence, and incident response services to mid-market and enterprise clients, and Booz Allen will remain a strategic collaborator for federal work.