Cybersecurity Acquisitions in Washington

Incode Technologies has acquired AuthenticID to enhance its AI-driven identity and fraud platform, combining complementary technology and services to better fight GenAI-enabled fraud. The deal expands Incode's capabilities in regulated, high-volume environments and strengthens its position serving banks, telecoms, and other enterprise customers.

Liongard has acquired the DarkLight Cyio platform, an AI-powered vulnerability prioritization and cyber risk solution, to enhance its Attack Surface Management capabilities. The acquisition expands Liongard's platform with real-time threat intelligence, contextual risk scoring, and business-aligned vulnerability insights to better serve MSP and MSSP partners.

Seattle-based MIND, an AI-native data loss prevention (DLP) and insider risk management platform, raised $30 million in a Series A round led by Paladin Capital Group and Crosspoint Capital Partners with participation from Okta Ventures and YL Ventures. The funding will be used to accelerate R&D, expand the go-to-market team, and scale adoption among enterprise customers, where MIND already serves Fortune 1000 organizations.

Palo Alto Networks has acquired Protect AI, a Seattle-based startup that secures AI models and deployments, in a deal announced in 2025 (terms not disclosed; sources pegged the value north of $500 million). The acquisition will fold Protect AI's model scanning, posture management, red teaming, and runtime protection capabilities into Palo Alto's Prisma AIRS platform to expand its AI security offerings for enterprise and government customers.

MajorKey Technologies, a U.S. identity security firm backed by The Acacia Group, has acquired Oxford Computer Group LLC US, an identity specialist with deep Microsoft and Saviynt expertise. The add-on expands MajorKey's cross-platform identity capabilities, increases scale (including federal capabilities) and integrates OCG as a MajorKey business division.

Aprio has acquired Securitybricks, Inc., a cybersecurity firm specializing in cloud security, compliance and government contracting assessments, effective Dec. 1, 2024. The acquisition brings more than 15 Securitybricks team members into Aprio's Risk Assurance and Advisory Services practice and expands Aprio's FedRAMP/CMMC assessment and managed security compliance capabilities.

Enzoic, a Boulder-based identity threat detection and protection firm, has acquired VeriClouds, a provider of compromised password data collection and credential monitoring. The acquisition combines VeriClouds' marketplace and data sources with Enzoic's threat intelligence capabilities to deliver expanded compromised credential monitoring and enhanced identity protection services.

Lumifi, a managed detection and response (MDR) cybersecurity company based in Scottsdale, Arizona, has acquired Critical Insight, a Bremerton, Washington-based incident response and professional services provider. The acquisition expands Lumifi's incident response and professional services capabilities—strengthening its healthcare and critical infrastructure coverage—and brings over 200 customers into Lumifi's combined base.

HEST Investments, a Dallas-based private equity firm, made a strategic $1 million investment in American Binary, a U.S.-based post-quantum encryption company. The minority growth investment (finalized in Q4 of last year) will help American Binary accelerate R&D and commercialize its quantum-resistant encryption and enterprise VPN solutions for business and government customers.

SecureAuth has acquired and integrated Cloudentity to strengthen its Customer Identity and Access Management (CIAM) and fine‑grained authorization capabilities. The deal brings Cloudentity's cloud‑native SaaS authorization technology and team into SecureAuth, accelerating SecureAuth's roadmap for CIAM, Open Banking (FAPI 2.0) support, and combined identity-security offerings.

Safe Security, an AI-driven cyber risk management company, has acquired RiskLens, the pioneer of the FAIR cyber risk quantification model. The combination integrates RiskLens’s FAIR-based analytics with Safe Security’s AI-powered SAFE platform to create a unified cyber risk quantification and management offering and accelerate compliance with emerging SEC cyber risk guidelines.

Johnson Controls acquired Seattle-based Tempered Networks to integrate its Airwall zero-trust cybersecurity platform into Johnson Controls’ OpenBlue smart‑buildings stack. The deal strengthens Johnson Controls’ ability to provide end‑to‑end zero trust security for connected building systems and to embed Tempered’s technology across its products and services; financial terms were not disclosed.

Vector Capital has made a large new equity investment in WatchGuard Technologies and acquired interests previously owned by Francisco Partners and other co-investors to become WatchGuard's majority shareholder. The investment positions Vector to accelerate WatchGuard's growth and platform innovation across cloud transformation, SASE, XDR, MDR and MSP-focused security offerings.

Sophos has acquired Refactr, a Bellevue-based DevSecOps automation platform, to integrate Security Orchestration, Automation and Response (SOAR) capabilities into its Managed Threat Response (MTR) and Extended Detection and Response (XDR) offerings. Refactr’s engineering team has joined Sophos and its platform (including a Community Edition) will continue to be developed and offered to partners and customers.

Long Ridge Equity Partners led a $100 million minority growth investment in AuthenticID to support the company's R&D, go-to-market efforts, and expansion across telecommunications, financial services, government, and other consumer segments. The funding is intended to accelerate AuthenticID's automated AI-based identity proofing platform and support the next generation of digital identity solutions; Long Ridge's Jim Brown will join the company's board.

Absolute Software Corporation completed its acquisition of NetMotion Software, Inc. from The Carlyle Group for approximately $340 million in cash, funded with about $65 million of cash on hand and a $275 million secured term loan from Benefit Street Partners. The deal integrates NetMotion's ZTNA and mobile VPN capabilities into Absolute's Endpoint Resilience platform to expand network access and zero-trust capabilities for remote and hybrid workforces.

ExtraHop, a Seattle-based leader in cloud-native network detection and response, has agreed to be acquired by Bain Capital Private Equity and Crosspoint Capital Partners in a transaction valued at $900 million. The deal will keep ExtraHop's CEO Arif Kareem and co-founders in leadership and is intended to accelerate product innovation and growth across multi-cloud, IoT, and enterprise environments.

Okta completed its acquisition of Auth0 on May 3, 2021. Auth0 will operate as an independent business unit within Okta, combining Okta’s enterprise identity capabilities with Auth0’s developer-focused identity platform to expand Okta’s identity offerings for both customers and employees.

Mastercard is acquiring Ekata for US$850 million to strengthen its digital identity and fraud-prevention capabilities by integrating Ekata’s identity verification data and machine-learning technology. The deal builds on Mastercard’s identity programs to provide real-time verification across merchants, financial institutions, marketplaces and travel platforms and is expected to close within six months subject to regulatory review.

KnowBe4 has acquired MediaPRO to expand its security awareness offering with MediaPRO's privacy and compliance training content. The deal will make MediaPRO's configurable privacy, security and compliance training modules available to KnowBe4's customers and integrate MediaPRO's enterprise customer base into KnowBe4's security awareness and simulated phishing platform.

Green Cloud Technologies has reached a definitive agreement to acquire Cascade Defense, a Spokane-based managed security service provider (MSSP). The deal, expected to close in Q1 2021, adds a Fortinet MSSP Expert partner, a Security Operations Center (SOC) and SIEM/SOC-as-a-service capabilities to Green Cloud's offering to its MSP and VAR partner ecosystem.

Zscaler announced the intent to acquire Cloudneeti, a Cloud Security Posture Management (CSPM) startup, to extend Zscaler's Cloud Security Platform with public-cloud misconfiguration detection and automated remediation capabilities. The acquisition will broaden Zscaler's data protection coverage across SaaS, IaaS and PaaS environments; terms were not disclosed and the deal was expected to close prior to Zscaler's fiscal third quarter.

AgilePQ, a Salt Lake City–based provider of post-quantum IoT security, has acquired Centri, an IoT cybersecurity company known for over-the-air retrofit technology and related patents. The deal adds Centri's patents and engineering talent to AgilePQ and expands AgilePQ's capabilities for delivering end-to-end, quantum-safe security for constrained IoT devices and mobile network operators.

Cloudflare, Inc. has acquired S2 Systems Corporation, a Kirkland-based developer of patented browser isolation technology, and will integrate S2's solution into Cloudflare Gateway as part of Cloudflare for Teams. The acquisition is intended to expand Cloudflare's security capabilities by enabling browser code execution in the cloud to protect endpoints without sacrificing performance.

Accenture has acquired Deja vu Security, a Seattle-area company that specializes in security design and testing for enterprise applications and Internet of Things (IoT) technologies. Deja vu Security will join Accenture Security's Cyber Defense offerings to deepen Accenture's capabilities in application and IoT security; financial terms were not disclosed.

Zix Corporation has acquired Seattle-based Erado, a provider of unified archiving, supervision, eDiscovery and analytics, to expand Zix’s cloud-based archiving, compliance and messaging solutions—particularly for regulated financial services customers. Erado serves more than 18,000 customers and the acquisition is expected to add approximately $1.5 million in subscription revenue in 2018 while enabling broader compliance and multi-channel archiving capabilities for Zix’s customer base.

Infoblox has agreed to acquire Tacoma-based cybersecurity firm IID for $45 million to expand its network security and threat-intelligence capabilities. IID co-founders Lars Harvey and Rod Rasmussen will join Infoblox's management team, most of IID's ~65 employees and the Tacoma office will be retained, and IID's customers (including Microsoft and the U.S. Department of the Treasury) will continue to be supported.