💼 M&A Tracker¶
Newest deals on top · scroll inside the panel for the full history. Colour bands mark each month.
August 2026
Aug 27
Socure → Fravity
Undisclosed
Agentic AI-native fraud/risk/compliance investigation platform, folded into Socure's RiskOS as RiskOS_Agents (starting with watchlist screening and KYB checks); announced alongside a $156M strategic growth investment (led by Summit Partners) valuing Socure at $5.2B; Fravity deployments show 80% lower cost-per-case, 5x faster resolution, 70% fewer false positives · Crunchbase News · BankInfoSecurity
Aug 19
Brinqa → PlexTrac
Undisclosed
Penetration testing and offensive-security reporting platform; closes the CTEM (Continuous Threat and Exposure Management) loop by adding attacker-perspective validation and proof-of-remediation; makes Brinqa the largest standalone unified exposure management vendor (3,000+ customers, 57 countries, 25%+ of Fortune 500) · https://www.helpnetsecurity.com/2026/08/19/brinqa-plextrac-acqisition/
Aug 19
Munich Re (via HSB) → $575M
75M
Cyber insurtech serving US SMEs with integrated cyber insurance and managed detection and response (MDR); Munich Re's largest disclosed primary-cyber-market move; At-Bay overseen by Hartford Steam Boiler (HSB), Munich Re's Global Specialty Insurance unit; closing expected Q1 2027; strengthens Munich Re's position combining insurance underwriting with proactive risk mitigation technology · Munich Re PR · Insurance Journal
Aug 17
Fortinet → Virtue AI
Undisclosed
AI runtime protection specialist with automated testing, real-time protection, and compliance oversight for AI models, conversational applications, and autonomous agents; integrated into Fortinet's Security for AI strategy and FortiGate platform; Gartner projects AI-security market to grow from .8B to 6.4B by 2030 · Fortinet PR · SecurityWeek · Help Net Security
Aug 14
Datavault AI (NASDAQ: DVLT) → CyberCatch Holdings (TSXV: CYBE)
$94.5M all-cash
AI-enabled continuous compliance and cyber-risk mitigation platform (NIST CSF 2.0, CMMC 2.0, ISO 27001, HIPAA, PCI DSS); patented agentic AI for continuous control assessment and pen testing; Datavault deploys CyberCatch as compliance layer across DataValue/DataScore/IDE product suite · https://ir.datavaultsite.com/news-events/press-releases/detail/487/datavault-ai-will-acquire-cybercatch-in-an-all-cash-transaction
Aug 12
Undisclosed → A Security
$37M Series B
Autonomous offensive security testing platform; AI-driven red-teaming. · https://www.securityweek.com/category/cybersecurity-funding-news/ma/
Aug 12
Undisclosed → Tenet Security
$6M seed
Early-stage cyber startup; seed funding round August 2026. · https://www.securityweek.com/category/cybersecurity-funding-news/ma/
Aug 7
AXA XL → S-RM
Undisclosed
Full acquisition of remaining shares in S-RM, a global corporate intelligence and cybersecurity consultancy (incident response, threat intelligence, integrity due diligence) operating in 140 countries; AXA XL integrates S-RM into its new AXA XL Risk Advisory unit, extending its prevention-focused offering beyond insurance underwriting into consultancy; transaction expected to close by end-September 2026 · AXA XL PR · Insurance Journal
Aug 4
Crescent Cove Advisors, Greylock, Menlo Ventures → Obsidian Security
5M Series D (.1B valuation)
Non-human identity and AI-agent security for SaaS/cloud; 60 Fortune 500 customers; unicorn milestone · https://pulse2.com/obsidian-security-raises-85-million-series-d-at-1-1-billion-valuation/
Aug 4
CrowdStrike Falcon Fund → Above Security
Undisclosed (strategic investment)
AI-native managed insider threat platform; integrates with Falcon Next-Gen SIEM telemetry for insider risk investigations · https://www.msspalert.com/brief/crowdstrike-invests-in-above-security-adds-insider-risk-investigations-to-falcon
Aug 4
Norwest Venture Partners, SoftBank Vision Fund 2, Hitachi Ventures, LG Technology Ventures, Qumra Capital, Vertex Ventures, Third Point Ventures, DTCP, Intel Capital → Zenity
$125M Series C ($180M total raised)
AI agent security governance platform (Tel Aviv, 2021) — governs agent intent, allows/blocks autonomous actions; targets the 1-billion AI-agent deployment wave; largest AI-agent-security raise of H2 2026 · https://zenity.io/company-overview/newsroom/company-news/zenity-raises-125-million-to-secure-the-era-of-1-billion-ai-agents/
Aug 4
Ballistic Ventures, Canon Capital, Greenfield Partners, Lightspeed, Red Dot Capital, TLV Partners → Oligo Security
$60M Series C ($140M total raised)
Runtime application security covering code, cloud workloads, and AI systems; addresses AI-accelerated exploit development · https://www.securityweek.com/oligo-raises-60-million-for-runtime-security/
Aug 3
Visa → BioCatch
$2.4B
Behavioral biometrics AI platform protecting 1.8B devices and 760M users across 350+ banking clients in 21 countries; fills AI-powered fraud detection gap as account takeovers and scams cost economy $1T+ annually; deal closes Q2 FY2027 pending regulatory approval · https://investor.visa.com/news/news-details/2026/Visa-to-Acquire-BioCatch/default.aspx
Aug 3
Bank of America → MDSec Consulting Limited
Undisclosed
Acquires UK red-team/pen-testing consultancy (~65 staff, Macclesfield) to internalise offensive security expertise alongside existing Chester cyber ops center · https://www.finextra.com/newsarticle/48179/bofa-to-buy-uk-cybersecurity-firm-mdsec-consulting
Aug 3
Deel → Clarity
~5-50M
Deepfake detection and AI identity verification embedded into Deel HR/payroll platform; combats projected 1-in-4 fraudulent candidate profiles by 2028 · https://www.deel.com/blog/deel-acquires-clarity/
Aug 1
SYN Ventures, DataTribe, TEDCO (lead: SYN Ventures) → Balance Theory
$19M Series A
AI-driven CISO investment management platform; helps enterprises evaluate and optimise security spending across $1B+ portfolios; addresses portfolio visibility gap for large-enterprise security teams · https://www.securityweek.com/balance-theory-raises-19-million-to-help-enterprises-manage-cybersecurity-investments/
July 2026
Jul 31
Cycurion (NASDAQ: CYCU) → Unnamed DC-based federal cybersecurity firm
Undisclosed
Federal cybersecurity services; acquisition announced alongside record contracted backlog exceeding $150M; expands Cycurion's footprint in US government/defense cyber services · https://www.stocktitan.net/news/CYCU/cycurion-nasdaq-cycu-announces-definitive-agreement-to-acquire-y1exn1qhhm08.html
Jul 30
Institutional investors → ThreatLocker
$190M Series D
Zero Trust endpoint security platform; round framed around AI threat protection and endpoint isolation for enterprise and MSP markets; Florida-based, ~3.5M protected endpoints · https://fintech.global/2026/07/30/threatlocker-lands-190m-as-ai-threats-reshape-security/
Jul 30
Okta → Permiso Security
~$200M
Identity threat detection startup (co-founded by ex-FireEye executives Paul Nguyen and Jason Martin); behavioral analytics across human, non-human, and AI agent identities; fills non-human identity (NHI) and AI agent security gap in Okta's portfolio; deal expected to close Q3 FY2027 · https://www.securityweek.com/okta-to-acquire-identity-threat-detection-firm-permiso/
Jul 29
Bessemer Venture Partners, Cyberstarts, TCV → Onyx Security
13M Series B (40M valuation)
AI-agent control plane keeping humans in authority over autonomous enterprise AI agents; Unit 8200 founders · https://www.timesofisrael.com/israeli-cyber-startup-raises-113m-to-secure-and-control-autonomous-ai-agents/
Jul 28
Cyera → Oasis Security
~$1B (LOI)
Non-human identity (NHI) and AI agent security startup (machine identity governance, service accounts, API keys, AI agent permissions); deal creates a combined data security + NHI platform at a time when AI agent proliferation is outpacing identity controls; Cyera recently raised $600M at $12B valuation; cash-majority deal · https://techcrunch.com/2026/07/28/cyera-agrees-to-acquire-oasis-security-for-1b-to-safeguard-proliferating-ai-agents/
Jul 28
Team8, Bessemer Venture Partners, Hetz Ventures, Claltech, Notable Capital, Startpoint Capital, SVCI (investors) → Act Security
$60M Seed + Series A
AI agent control and cloud security platform; stealth launch July 28; headquartered Tel Aviv; addresses AI agent permission management and control-plane visibility for enterprises deploying agentic AI workloads · https://www.chinatechnews.com/2026/07/29/126373-venture-capital-startup-funding-roundup-july-28-2026-battery-ventures-bessemer-gradient-team8-y-combinator-more
Jul 28
Team8, Battery Ventures, YL Ventures (investors) → Hush Security
$30M Series A
Machine access governance platform for enterprise AI agents and their infrastructure; Akamai Technologies joining as strategic investor; addresses control-plane gap as enterprises deploy AI agents at scale; founded 2024, less than one year from stealth to Series A · https://www.securityweek.com/hush-security-raises-30-million-for-ai-agent-governance/
Jul 28
Canaan Partners, Insight Partners, Team8, M12 (Microsoft Venture Fund) → Mate Security
$35M Series A
AI-native agentic security operations platform; brings total funding past $50M (eight months post-stealth); 500%+ revenue growth since Q3 2025; enterprise SOC automation targeting AI-speed threats; Black Hat USA 2026 exhibitor (Booth 4717, Aug 3-6) · https://pulse2.com/mate-security-raises-35-million-series-a-to-scale-agentic-security-operations-platform/
Jul 27
United Ventures (investor) → Beelzebub
€3.3M seed
AI-native deception platform (LLM-powered honeypots for servers, databases, APIs, cloud, IoT); NIS2 compliance tooling; targeting European enterprises · https://tech.eu/2026/07/27/beelzebub-raises-eur3m-to-strengthen-enterprise-cyber-defence-with-ai/
Jul 27
Keyfactor → Cofide
Undisclosed
Extends PKI-based verified identity to AI agents and cloud workloads; fills machine/agent identity gap for agentic AI deployments · https://www.keyfactor.com/press-releases/keyfactor-announces-intent-to-acquire-cofide-to-bring-verified-identity-to-ai-agents-and-cloud-workloads/
Jul 23
Battery Ventures, Accel, Foundation Capital → AegisAI
$36M Series A ($49M total raised)
AI-native email security countering AI spear-phishing surge (reported 5x increase); targets corporate inboxes with proprietary LLMs · https://www.prnewswire.com/news-releases/aegisai-raises-36-million-series-a-led-by-battery-ventures-to-fight-the-new-wave-of-ai-spear-phishing-302833624.html
Jul 23
Cheyenne Ventures, AVP (co-leads), Olive Hill Ventures → Abstract Security
$25M Series A extension ($50M total raised)
Composable streaming-first SIEM platform; 380% ARR YoY, 264% NRR — positioned as enterprise replacement for monolithic SIEM vendors · https://www.prnewswire.com/news-releases/abstract-raises-25-million-as-enterprises-shift-to-composable-security-operations-302832945.html
Jul 22
Andreessen Horowitz, Sequoia (investors) → Cathedral
$160M Series A ($1.4B valuation)
AI-native offensive and defensive cyber tooling for DoD and IC; founded by ex-DOGE alumni; targets defense-sector demand wave from Iran and Russia conflicts · https://www.usnews.com/news/top-news/articles/2026-07-22/exclusive-doge-alumni-launch-military-cyber-startup-with-1-4-billion-valuation
Jul 22
Sequoia, Cyberstarts, Greenoaks, Redpoint (investors) → Glow
$180M Series A ($1.2B valuation)
AI-native endpoint security purpose-built for agentic workloads and AI agents; founded by ex-Meta/Snowflake/Claroty team; targets coverage gap in traditional EDR for AI environments · https://www.globenewswire.com/news-release/2026/07/22/3331154/0/en/glow-emerges-from-stealth-with-180-million-to-reinvent-endpoint-security-in-the-ai-era.html
Jul 22
Cisco Investments (strategic) → Zafran Security
Strategic investment (>$140M total raised)
Threat exposure management platform; classifies 99% of critical CVEs as unexploitable in a given environment and focuses remediation on the 1% that matter; addresses CVE triage bottleneck · https://www.newswire.com/news/zafran-announces-strategic-investment-from-cisco-investments
Jul 21
Palo Alto Networks → Embrace
Undisclosed
Leading provider of user-focused observability; adds high-fidelity Real User Monitoring (RUM) and Digital Experience Monitoring (DEM/ADEM) capabilities to Palo Alto Networks Observability platform; also launching Synthetics for proactive application performance validation; Observability platform surpassed $300M ARR in Q3 FY26; expected close Q1 FY27 · Palo Alto IR · GuruFocus · StreetInsider
Jul 21
Series A investors (Brightmind Partners led) → Empirical Security
5M Series A (7M total raised)
AI-driven CVE exploit-prediction platform; Foundation monitors 18k+ CVEs for exploit likelihood; Radiant provides org-specific threat identification; founded 2024 by Kenna Security / EPSS alumni · https://www.securityweek.com/empirical-security-raises-25-million-in-series-a-funding/
Jul 20
A16Z, Bessemer, Craft, Merlin (investors) → Neo
$100M (seed + Series A combined)
Agentic software control for enterprise AI: SecOps inventory, posture, attribution, and policy enforcement across AI agents, AI-enabled apps, agentic browsers, NHI identities, and traditional software; built by ex-SentinelOne/Wiz/Palo Alto veterans; addresses coverage gap as enterprises adopt agentic tools at speed · https://www.securityweek.com/neo-emerges-from-stealth-with-100m-to-control-and-secure-enterprise-ai-software/ · https://www.globenewswire.com/news-release/2026/07/20/3329638/0/en/neo-launches-with-100m-to-secure-ai-software-across-the-enterprise.html
Jul 17
Axiom Equity, Mercia (investors) → Risk Ledger
$32M Series B
Network-first third-party risk management platform mapping supplier risk at depth; US expansion; addresses supply-chain cyber gap in enterprise vendor risk programmes · https://www.securityweek.com/risk-ledger-raises-32-million-in-series-b-funding/
Jul 16
Signicat → Inverid
Undisclosed
Dutch NFC-based digital identity verification company behind ReadID, used by 50+ organisations including Rabobank, ING, Entrust and government entities in UK and Denmark; deal strengthens Signicat's EU digital identity platform ahead of EUDI Wallet rollout; Inverid tripled revenue under Main Capital ownership; founders reinvesting proceeds into Signicat · https://www.signicat.com/press-releases/signicat-acquires-inverid
Jul 16
CrowdStrike → XM Cyber (IP acquisition from Schwarz Digits)
Undisclosed (IP-only)
45+ patents and proprietary source code for exposure management and attack-path analysis added to Falcon; Schwarz Digits simultaneously expands sovereign-cloud partnership bringing Falcon to STACKIT cloud for European sovereign deployments · https://ir.crowdstrike.com/news-releases/news-release-details/crowdstrike-and-schwarz-digits-expand-strategic-partnership · https://www.calcalistech.com/ctechnews/article/rkx9rod4zl
Jul 16
NINJIO → SafeStack
Undisclosed
Developer-focused secure coding and AppSec training platform; NINJIO had been reselling SafeStack's Secure Code product, making this a vertical integration acqui-hire that embeds secure-code training natively into NINJIO's human-risk management platform (Gauge Capital portfolio) · https://www.prnewswire.com/news-releases/ninjio-acquires-safestack-to-expand-human-risk-management-platform-with-secure-code-training-302827087.html
Jul 15
Accel, Greylock, CRV, Hetz, AlphaDrive (investors) → Oak
$60M seed
AI-native Identity Operating System replacing fragmented legacy IGA/IAM stack with a single continuous control plane governing all human, machine, and AI agent identities; founded Dec 2025 by ex-SentinelOne (CEO Shai Morag); already GA and deployed across enterprise customers · https://www.securityweek.com/oak-emerges-from-stealth-mode-with-60-million-in-funding/ · https://techcrunch.com/2026/07/15/backed-by-60m-in-funding-oak-steps-out-of-stealth-to-fix-the-identity-mess-that-ai-agents-are-making-worse/
Jul 15
Foundation Capital, Zetta Venture Partners (investors) → Pulse Security
$8M seed
AI-powered CISO operational management platform: program visibility, business-risk communication, board reporting · https://www.globenewswire.com/news-release/2026/07/15/3327850/0/en/Pulse-Security-Debuts-Operational-Management-Platform-Built-for-Security-Leaders.html
Jul 14
Cribl → CardinalOps
~$100M est.
AI-native detection-engineering platform; automates SIEM rule translation and coverage-gap analysis; new Tel Aviv R&D hub; extends Cribl AI platform into full AI-SOC offering · https://www.globenewswire.com/news-release/2026/07/14/3327113/0/en/cribl-acquires-cardinalops-to-further-expand-its-ai-platform-into-security-operations.html
Jul 13
NEA, Lightbank, XTX, Sequoia (investors) → Valarian
$50M Series A
Sovereign and air-gapped AI compute infrastructure for defense and regulated sectors; first NEA bet on a European defense-tech startup · https://www.securityweek.com/valarian-raises-50-million-for-sovereign-infrastructure-control-layer/
Jul 9
Bessemer Venture Partners, Merlin Ventures, Evolution Equity Partners, Singtel Innov8 (investors) → QIZ Security
$17M seed
Post-quantum cryptography orchestration: inventories cryptographic assets, manages migration to PQC-compliant algorithms; ecosystem with Cisco, AWS, Google, CrowdStrike · https://www.securityweek.com/qiz-security-raises-17-million-for-cryptographic-governance-platform/
Jul 7
Barracuda Networks → Evo Security
Undisclosed
PAM/IAM specialist for MSPs — multi-factor authentication, privileged access management, and identity controls integrated into the BarracudaONE platform; positions Barracuda as a single-vendor security stack for MSP customers with native identity governance alongside its existing email, network, and application security · Barracuda PR · Help Net Security · SiliconANGLE
Jul 3
Zurich Insurance Group → BOXX Insurance
Undisclosed
Toronto-based global cyber insurtech (retail + SME cyber insurance across 5 continents; prior Zurich partnership since 2021); BOXX continues operating as a standalone entity integrated into Zurich Global Ventures (ZGV); accelerates Zurich's cyber coverage and protection services for retail and SME customers globally; BOXX's all-in-one cyber insurance + security services model extends Zurich's position in the SME cyber market that large commercial insurers have historically underserved · BOXX PR · Reinsurance News · InsurTech Digital · Insurance Business
Jul 3
Viatel Technology Group → FullProxy
Undisclosed
Glasgow-based cybersecurity consultancy; Viatel expands its UK & Ireland security portfolio with a specialist firm serving healthcare, public sector, education, and CNI verticals; FullProxy brings penetration testing, managed security services, and security consulting capabilities · digit.fyi · Viatel PR · SiliconRepublic
Jul 1
LevelBlue → Trustwave
Undisclosed
MSSP consolidation forming world's largest pure-play managed security services provider; Trustwave brings SpiderLabs (threat research, intelligence, threat hunting), MDR, offensive security, strategic advisory, incident response, and security software; combined entity also includes Stroz Friedberg and Elysium Digital; LevelBlue is the AT&T Cybersecurity spinoff (Dallas TX); deal positions LevelBlue to serve SMB through large enterprise and public sector · LevelBlue PR · MSSP Alert · SecurityBrief · GovConWire
Jul 1
Qualcomm → SAM Seamless Network (Securing Sam Ltd.)
>$150M
Israeli IoT/connected-device security startup protecting 500M+ devices across 15M+ ISP/telco networks; customers include AT&T, Verizon, Bezeq (Israel), Telenet (Belgium), Virgin Media (UK); SAM's on-device security layer protects home/enterprise IoT environments at network edge without routing traffic through the cloud; fits Qualcomm's edge-AI strategy — thickening on-device protection reduces cloud compute dependency and extends Snapdragon platform value into CNI and enterprise IoT security · CTech/Calcalist · Globes · MarketScreener · Telecompaper
June 2026
Jun 30
Aikido Security → Root
~$70M
Belgian open-source AppSec unicorn ($1B valuation) acquires Israeli startup Root.io; Root deploys AI agents to generate and ship backported patches for vulnerable open-source library versions in 15–40 minutes — without forcing major version upgrades that break APIs; integrates into Aikido's platform as "Aikido Libraries," extending Aikido's ASPM from scanning into autonomous remediation for software supply-chain vulnerabilities · Help Net Security · Aikido Blog · CTech · GlobeNewswire
Jun 29
Intrusion Inc. → VigilAigent (from Tego Cyber)
Undisclosed
AI-native MSSP acquisition (~$3.5M ARR, 80+ reseller partners); combines VigilAigent's "The Oracle" agentic AI threat-detection engine with Intrusion's TraceCop platform; positions Intrusion as an AI-native managed security provider for SMB and mid-market · PR Inside/GlobeNewswire · StockTitan · SEC Form 8-K
Jun 29
CyberFOX → Timus Networks
Undisclosed
Tampa FL-based SASE + IAM startup for MSPs; adds secure web browsing, zero-trust network access, and adaptive access-policy enforcement to CyberFOX's single-vendor MSP security stack; both companies are Tampa-based and MSP-focused, creating an integrated SASE + endpoint + identity bundle · ChannelPro Network
Jun 26
Cyera → Otterize
Undisclosed (~tens of millions)
Cloud-native non-human identity (NHI) security startup (founded 2022; eBPF-based runtime agent that discovers and controls sensitive data flows in microservices and cloud-native workloads); Cyera's sixth acquisition, bolstering its DSPM and AI-governance stack with real-time data-lineage and workload-identity controls; Otterize backed by Index Ventures (raised $11.5M seed); co-founders are IDF 8200 alumni + former CTO of MuleSoft · Cyera PR · CTech
Jun 22
Booz Allen Hamilton → Ultra I&C Mission Solutions (from Cobham Ultra / Advent International)
$720M
Mission-critical software, encryption, and edge-compute products for US and allied defence and intelligence agencies; cryptographic and signals-processing products for classified programs; Cobham Ultra retains its radar, sonar, and countermeasures divisions; close Q2 FY2027 (targeting September 2026); double-digit revenue growth and >20% EBITDA margins projected per Booz Allen guidance; a sovereign capability play distinct from the NHI/SaaS consolidation wave · Booz Allen PR · BusinessWire · WashingtonExec · SEC 8-K
Jun 22
Cisco → WideField Security
Undisclosed
Identity-lifecycle security to extend Splunk's Agentic SOC (identity, credentials, sessions, blast radius) · SecurityWeek
Jun 22
F5 → SurePath AI
Undisclosed
Denver-based shadow AI detection and discovery startup (~19 employees, ~$6M raised); powers F5's AI Security Platform with network-based AI discovery identifying AI usage across the enterprise including shadow AI without requiring direct application integrations; 88% of organisations report AI-related security challenges per F5's 2026 State of Application Strategy Report; extends F5's application delivery portfolio into the AI governance and shadow-AI security layer · F5 PR · Help Net Security · GeekWire
Jun 18
Accenture → Dragos (majority) + runZero + NetRise
~$4.17B (Dragos valued $3.25B)
Move from OT services into OT security software; Dragos stays standalone, runZero (asset discovery/exposure) + NetRise (firmware/supply-chain) fold under it. ~$208M ARR, +53% YoY. Close Aug–Sep 2026 · SecurityWeek · Industrial Cyber
Jun 18
Group 11, Bicycle Capital, Bain Capital Ventures (+ others) → Dream (funding round — Series C)
$260M ($3B valuation)
Sovereign AI and national cyber defense platform for governments; three products: Sphere (CNI/nation-state threat defense), Hero (AI-powered autonomous vulnerability hunting), Atlas (national data/intelligence integration); $130M+ ARR; serving 6 governments; co-founded by Shalev Hulio (former CEO, NSO Group), Sebastian Kurz (former Austrian PM), and Gil Dolev; HQ Tel Aviv with offices in Vienna and Abu Dhabi; positioned as sovereign alternative to US/Chinese hyperscaler AI dependency · SecurityWeek · PR Newswire · Times of Israel
Jun 16
Databricks → Panther
Undisclosed
AI SOC / agentic detection platform; Panther built a security lakehouse-native SIEM enabling real-time threat detection at Databricks scale; integrates with Lakewatch (Databricks' agentic SIEM, launched Mar 2026 via Antimatter+SiftD.ai acquisitions); positions Databricks as a full-stack security analytics vendor — from data ingestion to detection engineering to AI-agent investigation; extends the "security lakehouse" model to disrupt legacy SIEM · Databricks PR · Infosecurity Magazine
Jun 15
SailPoint → Entro Security
~$200M est.
Israeli NHI / AI-agent identity security startup (Tel Aviv; $24M raised seed+Series A; covers 1,000+ NHI/agent types, 1,200+ credential types across 70+ enterprise sources; proprietary NHIDR — non-human identity detection and response for behavioral anomaly monitoring of AI agents and machine identities in real time); integrates into SailPoint Agentic Fabric to expand coverage across the full identity ecosystem from human to non-human to AI agent; closed June 29, 2026 — one of the fastest close timelines of the year · SailPoint PR · GlobeNewswire close · SiliconANGLE · SC Media
Jun 15
1Password → Apono
$250M–$300M (est.)
Israeli just-in-time privileged access management startup (80 staff, ~50 in Israel); dynamically grants and auto-revokes temporary narrowly scoped permissions for humans, machines, and AI agents at the moment of need — eliminates standing accounts and persistent privileges; positions 1Password as the "control plane" for access governance in the agentic workforce, extending from credential management into behavioral-access monitoring; 1Password PR states "over $200M," Calcalist reports $250M–$300M · 1Password PR · SecurityWeek · CTech
Jun 1
Dragos → Phosphorus
Undisclosed
xIoT/xOT security specialist (Nashville; ~$65M total funding, $38M round 2022); adds asset discovery, vulnerability management, and threat detection for billions of connected devices embedded in critical infrastructure (IIoT, medical IoT, smart-building, building automation); extends Dragos Platform's TAM to $50B+ · Dragos PR · BusinessWire · SecurityWeek
May 2026
SecurityWeek: 26 deals announced in May 2026.
May 26
Paessler AG → UVnetworks
Undisclosed
German IT/OT monitoring vendor (PRTG Network Monitor) acquires UVnetworks (maker of UVexplorer/UVexplorer Server — automated network topology discovery, inventory, and configuration backup); UVexplorer integrates as a native PRTG plugin, closing the gap between monitoring and network-context visibility for incident response; extends Paessler's TAM into network operations and OT security monitoring beyond its traditional IT heartbeat/SNMP roots · PR Newswire · ChannelE2E · Paessler PR
May 24
Cyera → Genie Security
~$50M
Six-month-old Israeli endpoint data-loss prevention startup; prevents sensitive data leaks from generative AI tools in real time; extends Cyera's DSPM ecosystem to the endpoint; Cyera's fifth acquisition, valued at $9B ($400M Series F) · CTech · Times of Israel · SecurityWeek
May 22
Cycurion → Secuvant
$2.875M
Automated SOC-as-a-Service with AI-driven threat detection and response; complements HavenX platform ($875K cash + 888,888 preferred shares; close within 7–10 days) · GlobeNewswire · SecurityWeek
May 21
Zscaler → Symmetry Systems
Undisclosed
Identity-mapping and data-access security for AI agents; Symmetry's "Access Graph" maps every human and non-human identity interaction across an enterprise, integrating with Zscaler Zero Trust Exchange to govern AI agent-to-agent communication at scale; fills a critical visibility gap as AI agents multiply service-account proliferation · Zscaler PR · Nasdaq/IR · StockTitan/8-K
May 19
Check Point → Deepchecks
~$15M
Israeli AI evaluation startup — team + IP acqui-hire; LLM evaluation and continuous monitoring integrated into Check Point's Agentic Network Security Orchestration platform; Check Point's fourth Israeli acquisition in 2026 (after Cyclops, Cyata, Rotate) · CTech · Security Boulevard · BankInfoSecurity
May 18
Torq → Jit
~$70M est.
AI context-graph firm; adds org-specific context to Torq's AI SOC platform for agentic investigations; ~30-person team joins Torq; deal not officially disclosed but estimated at ~$70M across multiple Israeli tech sources · CTech · BusinessWire · BankInfoSecurity
May 14
Akamai → LayerX
$205M
Browser-based AI usage control / secure enterprise browser; workforce-security strategy. Closed July 2, 2026. · SecurityWeek · Help Net · GlobeNewswire close
May 14
SecurityScorecard → Driftnet
Undisclosed
Internet-scanning / next-gen threat intel engine into the TITAN AI platform for third-party-risk · SecurityScorecard · SiliconANGLE
May 7
Cycurion → Halo Privacy + HavenX
Undisclosed
Secure communications + forensic attribution; government-grade privacy and active-defense stack atop Cycurion's existing cybersecurity services; close targeted end of June 2026 (NASDAQ: CYCU) · GlobeNewswire · SecurityWeek
May 6
WatchGuard → Perimeters.io
Undisclosed
Cloud Application Security SaaS for MSPs (founded 2022; ~30 staff, Wilmington DE; scans SaaS environments for misconfigurations across 40+ apps including M365, Salesforce, and OpenAI); simultaneous launch of WatchGuard CloudDR (Cloud Detection and Response) — continuous visibility, detection, and automated response for MSP multi-tenant cloud environments · WatchGuard PR · GlobeNewswire · BankInfoSecurity
May 4
Cisco → Astrix Security
~$400M
Israeli NHI (non-human identity) security startup — API keys, service accounts, OAuth tokens, AI agent credentials; integrates into Cisco's identity security layer for the agentic workforce; Cisco's largest Israeli acquisition since 2024 · Cisco Blogs · SecurityWeek · CTech
May 1
Datavault AI (NASDAQ: DVLT) → CyberCatch (TSXV: CYBE)
~CAD $136.8M (~USD $100M) all-stock
AI-enabled cyber risk mitigation and quantum-resistant security integration; CyberCatch's SaaS platform proactively discovers and remediates cyber risks in real time; acqui-hire + tech play to embed PQC into Datavault's SanQtum-secured edge ecosystem; CyberCatch valued at ~CAD $5.11/share (2.2× market premium); CyberCatch operates as Datavault subsidiary with founder Sai Huda as president · FinanceWire · Seeking Alpha · AccessNewswire
April 2026
Apr 30
Everfield Germany → Rhebo (sold by Landis+Gyr)
High single-digit M USD
OT/IIoT network anomaly-detection software (Leipzig, est. 2014; part of Landis+Gyr since 2021); Everfield expands its OT software vertical in DACH markets (existing: ondeso OT management); Landis+Gyr exits to refocus on core energy-metering business · Landis+Gyr PR · Industrial Cyber
Apr 30
Palo Alto Networks → Portkey
$120–140M est.
AI Gateway startup — centralised control plane to manage, route, and secure AI agent-to-agent and app-to-model traffic (processes trillions of tokens/month); integrates into Prisma AIRS to govern agentic AI at low-latency scale; close expected fiscal Q4 2026 · Palo Alto Networks PR · GuruFocus · Pulse2 · CTech
Apr 28
Silverfort → Fabrix Security
Undisclosed (est. tens of millions)
Israeli AI-native identity security startup (Tel Aviv); adds autonomous runtime identity protection — monitors and secures identity behaviors in real time, detecting anomalous service-account, machine-identity, and AI-agent activity across hybrid and multi-cloud environments; extends Silverfort's unified identity protection platform with AI-driven detection and response for the agentic workforce era · PR Newswire
Apr 28
Socket → Secure Annex
Undisclosed
Browser and editor extension security startup (John Tuckner, founder); extends Socket's open-source supply-chain security platform beyond npm/PyPI packages into browser extensions (Chrome/Edge), VS Code extensions, MCP servers, and AI skills — closing a high-risk visibility gap where attackers embed malicious code in developer tooling; customers include Reddit, Brave, Torq, and Movable Ink; Socket now protects 14,000+ orgs and 1.2M code repositories · Socket Blog · BankInfoSecurity · EINPresswire
Apr 28
Spin.AI → Revyz
Undisclosed
Atlassian Jira/Confluence backup and SSPM specialist (Atlassian Gold Marketplace Partner); extends Spin.AI's data resiliency and security posture management platform to the Atlassian ecosystem alongside Google Workspace, Microsoft 365, and Salesforce; combined platform covers automated backup, configuration drift detection, sandbox-to-production workflows, ransomware protection, eDiscovery, DLP, and SSPM across six SaaS platforms · Spin.AI PR · Newsfile · Seeking Alpha
Apr 23
Cyera → Ryft
Undisclosed (~$100–130M est.)
AI-agent data lake security (est. 2024, backed by Index Ventures / Bessemer; open-standard data lake with automated governance, compliance, DR); builds unified control plane for AI agent data access; Cyera's fourth acquisition, valued at $9B post $400M Series F · Cyera PR · SiliconANGLE
Apr 21
TekStream → ImagineX (cybersecurity division)
Undisclosed
Atlanta-based digital transformation firm acquires ImagineX's cybersecurity practice (Cyber Strategy & Advisory, vCISO, GRC, CTEM, IAM); positions TekStream as an end-to-end digital resilience provider from board-level strategy through SOC operations · PR Newswire · BankInfoSecurity
Apr 21
Airbus → Quarkslab
Undisclosed
French cybersecurity firm (~100 staff, Paris/Rennes; QShield protects software against AI-driven reverse engineering and adversarial threats); adds sovereign EU cyber R&D to Airbus Defence and Space's pan-European portfolio (alongside Infodas/DE, Ultra Cyber/UK); backed by Tikehau Capital since 2020 · Airbus PR · GovInfoSecurity
Apr 11
Fortreum → Kovr.AI
Undisclosed
FedRAMP-authorized AI-native compliance automation platform; adds AI-driven compliance readiness, audit preparation, and evidence-collection automation to Fortreum's federal cybersecurity and cloud consulting practice; Fortreum specialises in FedRAMP assessments and federal cloud security · BusinessWire
Apr 9
Cisco → Galileo Technologies
Undisclosed
AI agent observability and evaluation platform; extends Splunk Observability Cloud with agent tracing, quality evaluation, and production AI guardrails; closed May 22, 2026 · NetworkWorld · ChannelE2E · Futurum Group
Apr 2
Fortra → Zero-Point Security
Undisclosed
UK red-team training firm (est. 2018; Red Team Ops I & II courses, hands-on adversary emulation and penetration testing); Fortra's 21st acquisition — expands Cobalt Strike / Core Impact / Outflank offensive portfolio with specialized training and purple-team capability · Fortra PR · Security Today
March 2026
Mar 26
Rapid7 → Kenzo Security
Undisclosed
Agentic AI platform for autonomous SOC investigations and preemptive threat detection; no material ARR/profitability impact per Rapid7 · Rapid7 IR · SecurityWeek
Mar 24
Ekinops → Chimere
Undisclosed
French universal ZTNA startup (Paris); Chimere's agent-agnostic ZTNA platform securely interconnects all endpoints with all enterprise resources regardless of OS, device type, or location; positions Ekinops as the sole European single-vendor SASE company globally (combining existing Olfeo SWG/May 2025 and new Chimere ZTNA); transaction completed before March 31, 2026 · Ekinops PR · PRNewswire · Morningstar
Mar 24
Databricks → Antimatter + SiftD.ai
Undisclosed
Powers Lakewatch, Databricks' new open agentic SIEM; Antimatter adds AI-agent authentication/authorization (Berkeley researchers); SiftD.ai adds SPL-originated large-scale detection engineering (Splunk founders) · Databricks PR · TechCrunch · SiliconANGLE
Mar 23
Airbus Defence and Space → Ultra Cyber Ltd
Undisclosed
UK sovereign cybersecurity firm (200+ staff, Maidenhead cyber centre of excellence); cryptography and data security for UK MoD programs + specialised airborne datalinks capability; joins Airbus' Connected Intelligence business unit alongside prior acquisitions Quarkslab (FR, Apr 2026) and Infodas (DE); closes H2 2026 subject to regulatory approval; seller: Cobham Ultra (Advent International portfolio) · Airbus PR · Advent International · SecurityWeek
Mar 19
AppViewX → Eos
Undisclosed
AI-native Identity Control Plane for AI agents and autonomous workloads; AppViewX (CLM/PKI automation) acquires Eos (agentic governance + privileged access control for AI agents and machine identities in cloud and hybrid environments); integrates into AppViewX platform to deliver end-to-end machine and AI agent identity security; Eos co-founders become AppViewX CEO + CTO · AppViewX PR/GlobeNewswire · Help Net Security
Mar 11
Leonardo → Becrypt
Undisclosed
Italian aerospace, defense, and security multinational acquires UK-based data-protection and secure-mobile cybersecurity firm (encryption, secure OS, government-grade device security; founded 1996, ~100 specialists, London); expands Leonardo's cybersecurity footprint into UK sovereign/government markets; deal subject to regulatory approval, expected to close Q2 2026 · https://ukdefencejournal.org.uk/leonardo-to-acquire-uk-cyber-firm-becrypt/ · https://www.becrypt.com/becrypt-joins-forces-with-leonardo-to-expand-global-cyber-security-reach/
Mar 10
Accel, GV, Kleiner Perkins, Menlo Ventures, 8VC, Ballistic Ventures, In-Q-Tel (+ others) → Armadin (funding round — combined seed + Series A)
$189.9M
Autonomous AI cybersecurity agent startup founded by Kevin Mandia (former Mandiant CEO / Google Cloud cybersecurity chief) in September 2025; Armadin creates AI agents that autonomously scan for threats and conduct red-teaming without human intervention; 60+ employees at launch; working with Fortune 100 companies; combined seed + Series A is reportedly a record for a security startup at that stage; Accel leads, with GV (Google Ventures), Kleiner Perkins, Menlo Ventures, 8VC, Ballistic Ventures (Mandia co-founded), and In-Q-Tel (CIA) participating · SecurityWeek · TechCrunch · CNBC · GovInfoSecurity
Mar 9
OpenAI → Promptfoo
Undisclosed (last valued ~$86M, Jul 2025)
Agentic AI security testing; integrates into OpenAI's Frontier platform to identify and remediate AI-system vulnerabilities during development · OpenAI · SecurityWeek · TechCrunch
Mar 3
Giesecke+Devrient (G+D) / Veridos → XTec
Undisclosed
US federal-grade identity, authentication, and access management specialist (FedRAMP High authorized — the only ICAM ecosystem certified at this level; long-standing relationships with 105+ US federal agencies; cryptographic tokens and smart access systems for government and regulated enterprises); integrated into Veridos (G+D's joint venture with Bundesdruckerei, the German federal government ID technology group); closed February 27, 2026, announced March 3; expands G+D's Digital Security Segment and Veridos' federal credentialing footprint · G+D PR · GlobeNewswire · Biometric Update
Mar 2
Quantum eMotion → SKV Technology Inc.
Undisclosed
Canadian quantum-resistant security firm acquires SKV Technology (Ottawa; hardware security modules and post-quantum cryptography integration); expands Quantum eMotion's quantum-safe product portfolio for financial services and critical infrastructure; closed March 2, 2026 · Quantum eMotion PR · SEC Filing
Mar 2
Zurich Insurance → Beazley
$10.9B (~£8.1B)
Specialty insurer (cyber, marine, aviation, space, fine art); Beazley is one of the world's largest cyber insurers with Full Spectrum Cyber offering combining coverage + in-house IR + proactive security services; combined ~$15B specialty GWP; close H2 2026 subject to regulatory approval · Zurich PR · Insurance Journal
February 2026
Feb 27
Quantum eMotion → Jet Lab Technologies (SecureKey platform)
Up to $15M (royalties over 5 years)
QeM acquired Jet Lab's SecureKey cryptographic-software platform to combine it with its QRNG-powered Sentry-Q layer, creating a full-stack quantum-resilient security architecture spanning cloud, network, endpoint, and chip; distinct from QeM's concurrent March acquisition of SKV Technology hardware security modules · GlobeNewswire
Feb 23
Experian → AtData
Undisclosed
Email identity intelligence specialist (world's most comprehensive email insights technology; 10B+ email addresses globally; 98% coverage of active North American email addresses; real-time signals on validity, deliverability, fraud risk, identity linkage); Experian integrates AtData into its identity and fraud decisioning platforms to close gaps in email-based authentication and fraud prevention; Experian's first acquisition in 16+ years · Experian PR · Finovate · RegTech Analyst
Feb 18
Palo Alto Networks → Koi
~$400M est.
Agentic endpoint security startup (secures unvetted browser extensions, AI tools, and developer add-ons that employees install — the "last mile" of the modern attack surface); technology folds into Cortex XDR and Prisma AIRS to govern AI agent-level endpoint risk; closed April 14, 2026 · Palo Alto Networks PR · KuppingerCole · Futurum Group
Feb 17
Booz Allen Hamilton → Defy Security
Undisclosed
Cyber services and consulting firm; expands Booz Allen's global commercial business into UK/EU financial services, health/life sciences, manufacturing, and energy markets · Booz Allen PR · SecurityWeek
Feb 17
ITC Secure + IronNet (merger) → Collective Defence (new co.)
Undisclosed
UK-headquartered ITC Secure (30+ years managed security / SOC operations) merged with IronNet's collective-defense network-detection platform to form Collective Defence — a Luxembourg-domiciled critical-infrastructure protection company targeting state-sponsored hybrid-warfare threats; combined entity serves CNI operators across financial services, energy, and government · BusinessWire
Feb 12
Proofpoint → Acuvity
Undisclosed
AI enterprise security and governance startup (founded 2023, 24 staff, $9M seed Foundation Capital; emerged from stealth Sep 2024); delivers visibility, governance, and runtime protection across the full AI/agent-driven workspace — from browser endpoints and MCP servers to locally installed models; enables Proofpoint to govern shadow AI usage, prevent sensitive data exposure to GenAI services, and defend against prompt injection and model-manipulation attacks; extends the human-centric security platform into the agentic workforce era · Proofpoint PR · Help Net Security · CyberScoop
Feb 12
Check Point → Cyata + Cyclops Security + Rotate
~$150M total (~$85M to Cyclops)
Three Israeli startups acquired simultaneously to build an end-to-end AI security platform: Cyata (AI agent identity management — discover active agents, map permissions, monitor behavior, enforce policy; founded 2024); Cyclops (internal asset discovery + continuous threat exposure management — integrates with 150+ systems across SaaS, cloud, on-premises, IoT/OT, endpoints and workloads); Rotate (unified MSP management and scalability for mid-market customers); Check Point's fourth through sixth Israeli acquisitions in 2026 · Check Point PR · CTech · BankInfoSecurity · SC Media
Feb 11
Palo Alto Networks → CyberArk
$25B
Bring identity security into the core platform; largest pure-play cyber deal of 2026 · Verdict
Feb 11
Cellebrite → SCG Canada, Inc.
Undisclosed
Drone/UAV digital forensics leader; access to data from 80+ UAV types (flight logs, video, cell tower data, telemetry); extends Cellebrite's AI platform for law enforcement, defense, and intelligence customers; closed March 2, 2026 · Cellebrite PR · Newswire.ca
Feb 11
Endor Labs → Autonomous Plane
Undisclosed
Cloud-native AppSec startup (founded by Kyle Quest, creator of DockerSlim); adds full-stack reachability from code to container — SCA findings correlated with container image vulnerabilities, runtime profiling to identify genuinely exploitable vulns; eliminates up to 90% of false positives typical of conventional scanners; extends Endor Labs' AI-native application security platform · Endor Labs PR · fintech.global
Feb 10
Sophos → Arco Cyber
Undisclosed
UK-based cybersecurity assurance company (~30 staff; specialist in controls optimization and governance automation); Sophos integrates Arco's capabilities into its CISO Advantage offering, delivering AI-powered cybersecurity governance to organisations that lack dedicated security leadership — one of the only MDR vendors to bundle CISO-level advisory at scale · Sophos PR · GlobeNewswire · SecurityWeek
Feb 5
Zscaler → SquareX
Undisclosed
Browser security / zero trust for the AI era; extends Zscaler's inline proxy architecture into the browser layer for AI-agent traffic and data controls · Zscaler IR · SecurityWeek
Feb 3
Varonis → AllTrue.ai
$150M
AI trust, risk, and security management (TRiSM); enables Varonis customers to monitor and govern AI agent behavior and reduce AI-introduced data risks · GlobeNewswire · SecurityWeek
Feb 3
Logicalis US → Maple Woods Enterprises
Undisclosed
Managed security services provider; adds Maple Woods' "Overwatch" cybersecurity and compliance program (built to federal/regulated-sector standards) to Logicalis's services framework, expanding into healthcare and SLED (state, local, education) markets · PR Newswire
Feb (TBD)
Arctic Wolf → Sevco Security
Undisclosed
Attack surface management (ASM) into Arctic Wolf's managed SOC platform; improves asset inventory and exposure visibility for managed detection customers · SecurityWeek
January 2026
Jan 29
Palo Alto Networks → Chronosphere
$3.35B
Cloud-native observability for AI-era data volumes; visibility/security at scale · CTech
Jan 27
LevelBlue → Alert Logic MDR (from Fortra)
Undisclosed
MSSP consolidation: LevelBlue acquires Fortra's Alert Logic managed detection and response (MDR), extended detection and response (XDR), and web application firewall (WAF) services business; Fortra transitions to a technology partner; extends LevelBlue's managed security services portfolio and customer base in the SMB and mid-market segments · CyberScoop · LevelBlue PR
Jan 26
Radware → Pynt
Undisclosed
Israeli API security testing startup; adds automated pre-production API security testing + dynamic vulnerability discovery to Radware's API portfolio; extends protection across the full API lifecycle from design through runtime; acquired at close (not just announced) · GlobeNewswire/Security Solutions Media · SecurityWeek
Jan 26
OVHcloud → Seald
Undisclosed
French E2E encryption startup with ANSSI CSPN security visa; zero-knowledge model encrypts data client-side before upload — neither host nor admin can access plaintext; Seald SDK natively integrated into OVHcloud's Secret Manager, KMS, and HSM catalogue; sovereign European cloud data-protection play · OVHcloud PR · Channel Web · SecurityWeek
Jan 15
Delinea → StrongDM
Undisclosed
PAM leader acquires JIT runtime authorization and universal access management (infrastructure, databases, AI agents); eliminates standing credentials in favour of access granted at the moment of action; closed March 5, 2026 · Delinea PR · MSSP Alert
Jan 15
Parsons Corporation → Altamira Technologies (from ClearSky)
~$385M ($340M base + $45M earn-out)
National security IT and cybersecurity services firm (McLean, VA; 600+ employees, 90%+ clearance-holders); delivers advanced analytics, SIGINT, cyber, missile warning, and space capabilities; adds to Parsons' Defence & Intelligence unit; closed January 15, 2026 · Parsons IR · GlobeNewswire · SecurityWeek
Jan 14
Infoblox → Axur
Undisclosed
AI-powered external threat discovery and digital risk protection; adds brand-abuse, credential-exposure, and phishing takedown capabilities (40M+ URLs/day scanned); closes May 5, 2026 · Infoblox PR · BankInfoSecurity
Jan 13
CrowdStrike → Seraphic Security
~$420M
Israeli browser runtime security firm; decouples security from the browser itself — enforces policy within Chrome, Edge, Safari, Firefox, and agentic browsers on managed and unmanaged devices alike; turns any browser into a secure enterprise browser without forced migration; closes Q1 FY27 · CrowdStrike PR · CTech · CyberScoop
Jan 12
OneSpan → Build38
Undisclosed
Mobile app protection SDK spinoff from Giesecke+Devrient; adds client-side on-device app-shielding, runtime application self-protection (RASP), and SDK hardening to OneSpan's identity verification and e-signature portfolio; closed March 2, 2026 · OneSpan IR · SEC 8-K
Jan 8
ThreatModeler → IriusRisk
$100M+
Spain-based threat modeling platform (Paladin Capital-backed); unites the top two enterprise threat modeling platforms; $50M combined ARR; positions for AI-era design-time security in the application security market; deal closed end-2025, announced Jan 8 · Fortune · PRNewswire · ThreatModeler PR
Jan 8
CrowdStrike → SGNL
$740M
Continuous identity and dynamic authorization startup; grants/revokes access for human, non-human (NHI), and AI agent identities in real time based on contextual risk — eliminates standing privileges; integrates into Falcon Identity Protection; closes Q1 FY27 · CrowdStrike PR · The Register
Jan 8
JumpCloud → MacSolution
Undisclosed
Brazil's largest JumpCloud MSP (São Paulo); acqui-hire to build a LatAm GTM hub for JumpCloud's open directory/identity platform; expands JumpCloud's presence in the largest enterprise IT market in South America · JumpCloud PR · SiliconANGLE
🧩 Consolidation by subsector¶
Every tracked deal and funding round, grouped by cyber subsector (taxonomy anchored on Momentum Cyber CYBERscape + Gartner market segments — see Methodology). Sorted by deal count: where buy-side attention is concentrating, and by omission, where it isn't.
Identity & Access19
deal(s) · $27.9B disclosed
Latest — Jul 2026: Okta → Permiso Security
AI Security & Governance19
deal(s) · $901M disclosed
Latest — Aug 2026: Fortinet → Virtue AI
Security Services17
deal(s) · $963M disclosed
Latest — Aug 2026: Munich Re (via HSB) → At-Bay
Security Operations10
deal(s) · $3.6B disclosed
Latest — Aug 2026: CrowdStrike Falcon Fund → Above Security
Application & Supply Chain10
deal(s) · $650M disclosed
Latest — Aug 2026: Ballistic Ventures, Canon Capital, Greenfield Partners, Lightspeed, Red Dot Capi
Data Security & Privacy8
deal(s) · $82M disclosed
Latest — Jul 2026: Bessemer Venture Partners, Merlin Ventures, Evolution Equity Partners, Singtel I
Exposure Management8
deal(s) · $177M disclosed
Latest — Aug 2026: Brinqa → PlexTrac
GRC & Trust8
deal(s) · $11.2B disclosed
Latest — Aug 2026: Datavault AI (NASDAQ: DVLT) → CyberCatch Holdings (TSXV: CYBE)
OT / ICS / IoT5
deal(s) · $4.3B disclosed
Latest — Jul 2026: Qualcomm → SAM Seamless Network (Securing Sam Ltd.)
Fraud & Identity Verification5
deal(s) · $2.4B disclosed
Latest — Aug 2026: Socure → Fravity
Endpoint & Device4
deal(s) · $975M disclosed
Latest — Jul 2026: Institutional investors → ThreatLocker
Email & Human Risk2
deal(s) · $36M disclosed
Latest — Jul 2026: Battery Ventures, Accel, Foundation Capital → AegisAI
Network & Edge1
deal(s) · — disclosed
Latest — Mar 2026: Ekinops → Chimere
Cloud Security1
deal(s) · — disclosed
Latest — Aug 2026: Crescent Cove Advisors, Greylock, Menlo Ventures → Obsidian Security
Other / Unclassified5
deal(s) · $1.2B disclosed
Latest — Aug 2026: Undisclosed → Tenet Security
Full deal record¶
Cybersecurity M&A, 2026 onward. Deals filed by announcement month; de-duplicated by buyer + target. US & Europe prioritised, notable global deals included.
August 2026¶
| Date | Buyer | Target(s) | Value | Rationale | Source |
|---|---|---|---|---|---|
| Aug 27 | Socure | Fravity | Undisclosed | Agentic AI-native fraud/risk/compliance investigation platform, folded into Socure's RiskOS as RiskOS_Agents (starting with watchlist screening and KYB checks); announced alongside a $156M strategic growth investment (led by Summit Partners) valuing Socure at $5.2B; Fravity deployments show 80% lower cost-per-case, 5x faster resolution, 70% fewer false positives | Crunchbase News · BankInfoSecurity |
| Aug 19 | Brinqa | PlexTrac | Undisclosed | Penetration testing and offensive-security reporting platform; closes the CTEM (Continuous Threat and Exposure Management) loop by adding attacker-perspective validation and proof-of-remediation; makes Brinqa the largest standalone unified exposure management vendor (3,000+ customers, 57 countries, 25%+ of Fortune 500) | https://www.helpnetsecurity.com/2026/08/19/brinqa-plextrac-acqisition/ |
| Aug 19 | Munich Re (via HSB) | $575M | 75M | Cyber insurtech serving US SMEs with integrated cyber insurance and managed detection and response (MDR); Munich Re's largest disclosed primary-cyber-market move; At-Bay overseen by Hartford Steam Boiler (HSB), Munich Re's Global Specialty Insurance unit; closing expected Q1 2027; strengthens Munich Re's position combining insurance underwriting with proactive risk mitigation technology | Munich Re PR · Insurance Journal |
| Aug 17 | Fortinet | Virtue AI | Undisclosed | AI runtime protection specialist with automated testing, real-time protection, and compliance oversight for AI models, conversational applications, and autonomous agents; integrated into Fortinet's Security for AI strategy and FortiGate platform; Gartner projects AI-security market to grow from .8B to 6.4B by 2030 | Fortinet PR · SecurityWeek · Help Net Security |
| Aug 14 | Datavault AI (NASDAQ: DVLT) | CyberCatch Holdings (TSXV: CYBE) | $94.5M all-cash | AI-enabled continuous compliance and cyber-risk mitigation platform (NIST CSF 2.0, CMMC 2.0, ISO 27001, HIPAA, PCI DSS); patented agentic AI for continuous control assessment and pen testing; Datavault deploys CyberCatch as compliance layer across DataValue/DataScore/IDE product suite | https://ir.datavaultsite.com/news-events/press-releases/detail/487/datavault-ai-will-acquire-cybercatch-in-an-all-cash-transaction |
| Aug 12 | Undisclosed | A Security | $37M Series B | Autonomous offensive security testing platform; AI-driven red-teaming. | https://www.securityweek.com/category/cybersecurity-funding-news/ma/ |
| Aug 12 | Undisclosed | Tenet Security | $6M seed | Early-stage cyber startup; seed funding round August 2026. | https://www.securityweek.com/category/cybersecurity-funding-news/ma/ |
| Aug 7 | AXA XL | S-RM | Undisclosed | Full acquisition of remaining shares in S-RM, a global corporate intelligence and cybersecurity consultancy (incident response, threat intelligence, integrity due diligence) operating in 140 countries; AXA XL integrates S-RM into its new AXA XL Risk Advisory unit, extending its prevention-focused offering beyond insurance underwriting into consultancy; transaction expected to close by end-September 2026 | AXA XL PR · Insurance Journal |
| Aug 4 | Crescent Cove Advisors, Greylock, Menlo Ventures | Obsidian Security | 5M Series D (.1B valuation) | Non-human identity and AI-agent security for SaaS/cloud; 60 Fortune 500 customers; unicorn milestone | https://pulse2.com/obsidian-security-raises-85-million-series-d-at-1-1-billion-valuation/ |
| Aug 4 | CrowdStrike Falcon Fund | Above Security | Undisclosed (strategic investment) | AI-native managed insider threat platform; integrates with Falcon Next-Gen SIEM telemetry for insider risk investigations | https://www.msspalert.com/brief/crowdstrike-invests-in-above-security-adds-insider-risk-investigations-to-falcon |
| Aug 4 | Norwest Venture Partners, SoftBank Vision Fund 2, Hitachi Ventures, LG Technology Ventures, Qumra Capital, Vertex Ventures, Third Point Ventures, DTCP, Intel Capital | Zenity | $125M Series C ($180M total raised) | AI agent security governance platform (Tel Aviv, 2021) — governs agent intent, allows/blocks autonomous actions; targets the 1-billion AI-agent deployment wave; largest AI-agent-security raise of H2 2026 | https://zenity.io/company-overview/newsroom/company-news/zenity-raises-125-million-to-secure-the-era-of-1-billion-ai-agents/ |
| Aug 4 | Ballistic Ventures, Canon Capital, Greenfield Partners, Lightspeed, Red Dot Capital, TLV Partners | Oligo Security | $60M Series C ($140M total raised) | Runtime application security covering code, cloud workloads, and AI systems; addresses AI-accelerated exploit development | https://www.securityweek.com/oligo-raises-60-million-for-runtime-security/ |
| Aug 3 | Visa | BioCatch | $2.4B | Behavioral biometrics AI platform protecting 1.8B devices and 760M users across 350+ banking clients in 21 countries; fills AI-powered fraud detection gap as account takeovers and scams cost economy $1T+ annually; deal closes Q2 FY2027 pending regulatory approval | https://investor.visa.com/news/news-details/2026/Visa-to-Acquire-BioCatch/default.aspx |
| Aug 3 | Bank of America | MDSec Consulting Limited | Undisclosed | Acquires UK red-team/pen-testing consultancy (~65 staff, Macclesfield) to internalise offensive security expertise alongside existing Chester cyber ops center | https://www.finextra.com/newsarticle/48179/bofa-to-buy-uk-cybersecurity-firm-mdsec-consulting |
| Aug 3 | Deel | Clarity | ~5-50M | Deepfake detection and AI identity verification embedded into Deel HR/payroll platform; combats projected 1-in-4 fraudulent candidate profiles by 2028 | https://www.deel.com/blog/deel-acquires-clarity/ |
| Aug 1 | SYN Ventures, DataTribe, TEDCO (lead: SYN Ventures) | Balance Theory | $19M Series A | AI-driven CISO investment management platform; helps enterprises evaluate and optimise security spending across $1B+ portfolios; addresses portfolio visibility gap for large-enterprise security teams | https://www.securityweek.com/balance-theory-raises-19-million-to-help-enterprises-manage-cybersecurity-investments/ |
July 2026¶
| Date | Buyer | Target(s) | Value | Rationale | Source |
|---|---|---|---|---|---|
| Jul 31 | Cycurion (NASDAQ: CYCU) | Unnamed DC-based federal cybersecurity firm | Undisclosed | Federal cybersecurity services; acquisition announced alongside record contracted backlog exceeding $150M; expands Cycurion's footprint in US government/defense cyber services | https://www.stocktitan.net/news/CYCU/cycurion-nasdaq-cycu-announces-definitive-agreement-to-acquire-y1exn1qhhm08.html |
| Jul 30 | Institutional investors | ThreatLocker | $190M Series D | Zero Trust endpoint security platform; round framed around AI threat protection and endpoint isolation for enterprise and MSP markets; Florida-based, ~3.5M protected endpoints | https://fintech.global/2026/07/30/threatlocker-lands-190m-as-ai-threats-reshape-security/ |
| Jul 30 | Okta | Permiso Security | ~$200M | Identity threat detection startup (co-founded by ex-FireEye executives Paul Nguyen and Jason Martin); behavioral analytics across human, non-human, and AI agent identities; fills non-human identity (NHI) and AI agent security gap in Okta's portfolio; deal expected to close Q3 FY2027 | https://www.securityweek.com/okta-to-acquire-identity-threat-detection-firm-permiso/ |
| Jul 29 | Bessemer Venture Partners, Cyberstarts, TCV | Onyx Security | 13M Series B (40M valuation) | AI-agent control plane keeping humans in authority over autonomous enterprise AI agents; Unit 8200 founders | https://www.timesofisrael.com/israeli-cyber-startup-raises-113m-to-secure-and-control-autonomous-ai-agents/ |
| Jul 28 | Cyera | Oasis Security | ~$1B (LOI) | Non-human identity (NHI) and AI agent security startup (machine identity governance, service accounts, API keys, AI agent permissions); deal creates a combined data security + NHI platform at a time when AI agent proliferation is outpacing identity controls; Cyera recently raised $600M at $12B valuation; cash-majority deal | https://techcrunch.com/2026/07/28/cyera-agrees-to-acquire-oasis-security-for-1b-to-safeguard-proliferating-ai-agents/ |
| Jul 28 | Team8, Bessemer Venture Partners, Hetz Ventures, Claltech, Notable Capital, Startpoint Capital, SVCI (investors) | Act Security | $60M Seed + Series A | AI agent control and cloud security platform; stealth launch July 28; headquartered Tel Aviv; addresses AI agent permission management and control-plane visibility for enterprises deploying agentic AI workloads | https://www.chinatechnews.com/2026/07/29/126373-venture-capital-startup-funding-roundup-july-28-2026-battery-ventures-bessemer-gradient-team8-y-combinator-more |
| Jul 28 | Team8, Battery Ventures, YL Ventures (investors) | Hush Security | $30M Series A | Machine access governance platform for enterprise AI agents and their infrastructure; Akamai Technologies joining as strategic investor; addresses control-plane gap as enterprises deploy AI agents at scale; founded 2024, less than one year from stealth to Series A | https://www.securityweek.com/hush-security-raises-30-million-for-ai-agent-governance/ |
| Jul 28 | Canaan Partners, Insight Partners, Team8, M12 (Microsoft Venture Fund) | Mate Security | $35M Series A | AI-native agentic security operations platform; brings total funding past $50M (eight months post-stealth); 500%+ revenue growth since Q3 2025; enterprise SOC automation targeting AI-speed threats; Black Hat USA 2026 exhibitor (Booth 4717, Aug 3-6) | https://pulse2.com/mate-security-raises-35-million-series-a-to-scale-agentic-security-operations-platform/ |
| Jul 27 | United Ventures (investor) | Beelzebub | €3.3M seed | AI-native deception platform (LLM-powered honeypots for servers, databases, APIs, cloud, IoT); NIS2 compliance tooling; targeting European enterprises | https://tech.eu/2026/07/27/beelzebub-raises-eur3m-to-strengthen-enterprise-cyber-defence-with-ai/ |
| Jul 27 | Keyfactor | Cofide | Undisclosed | Extends PKI-based verified identity to AI agents and cloud workloads; fills machine/agent identity gap for agentic AI deployments | https://www.keyfactor.com/press-releases/keyfactor-announces-intent-to-acquire-cofide-to-bring-verified-identity-to-ai-agents-and-cloud-workloads/ |
| Jul 23 | Battery Ventures, Accel, Foundation Capital | AegisAI | $36M Series A ($49M total raised) | AI-native email security countering AI spear-phishing surge (reported 5x increase); targets corporate inboxes with proprietary LLMs | https://www.prnewswire.com/news-releases/aegisai-raises-36-million-series-a-led-by-battery-ventures-to-fight-the-new-wave-of-ai-spear-phishing-302833624.html |
| Jul 23 | Cheyenne Ventures, AVP (co-leads), Olive Hill Ventures | Abstract Security | $25M Series A extension ($50M total raised) | Composable streaming-first SIEM platform; 380% ARR YoY, 264% NRR — positioned as enterprise replacement for monolithic SIEM vendors | https://www.prnewswire.com/news-releases/abstract-raises-25-million-as-enterprises-shift-to-composable-security-operations-302832945.html |
| Jul 22 | Andreessen Horowitz, Sequoia (investors) | Cathedral | $160M Series A ($1.4B valuation) | AI-native offensive and defensive cyber tooling for DoD and IC; founded by ex-DOGE alumni; targets defense-sector demand wave from Iran and Russia conflicts | https://www.usnews.com/news/top-news/articles/2026-07-22/exclusive-doge-alumni-launch-military-cyber-startup-with-1-4-billion-valuation |
| Jul 22 | Sequoia, Cyberstarts, Greenoaks, Redpoint (investors) | Glow | $180M Series A ($1.2B valuation) | AI-native endpoint security purpose-built for agentic workloads and AI agents; founded by ex-Meta/Snowflake/Claroty team; targets coverage gap in traditional EDR for AI environments | https://www.globenewswire.com/news-release/2026/07/22/3331154/0/en/glow-emerges-from-stealth-with-180-million-to-reinvent-endpoint-security-in-the-ai-era.html |
| Jul 22 | Cisco Investments (strategic) | Zafran Security | Strategic investment (>$140M total raised) | Threat exposure management platform; classifies 99% of critical CVEs as unexploitable in a given environment and focuses remediation on the 1% that matter; addresses CVE triage bottleneck | https://www.newswire.com/news/zafran-announces-strategic-investment-from-cisco-investments |
| Jul 21 | Palo Alto Networks | Embrace | Undisclosed | Leading provider of user-focused observability; adds high-fidelity Real User Monitoring (RUM) and Digital Experience Monitoring (DEM/ADEM) capabilities to Palo Alto Networks Observability platform; also launching Synthetics for proactive application performance validation; Observability platform surpassed $300M ARR in Q3 FY26; expected close Q1 FY27 | Palo Alto IR · GuruFocus · StreetInsider |
| Jul 21 | Series A investors (Brightmind Partners led) | Empirical Security | 5M Series A (7M total raised) | AI-driven CVE exploit-prediction platform; Foundation monitors 18k+ CVEs for exploit likelihood; Radiant provides org-specific threat identification; founded 2024 by Kenna Security / EPSS alumni | https://www.securityweek.com/empirical-security-raises-25-million-in-series-a-funding/ |
| Jul 20 | A16Z, Bessemer, Craft, Merlin (investors) | Neo | $100M (seed + Series A combined) | Agentic software control for enterprise AI: SecOps inventory, posture, attribution, and policy enforcement across AI agents, AI-enabled apps, agentic browsers, NHI identities, and traditional software; built by ex-SentinelOne/Wiz/Palo Alto veterans; addresses coverage gap as enterprises adopt agentic tools at speed | https://www.securityweek.com/neo-emerges-from-stealth-with-100m-to-control-and-secure-enterprise-ai-software/ · https://www.globenewswire.com/news-release/2026/07/20/3329638/0/en/neo-launches-with-100m-to-secure-ai-software-across-the-enterprise.html |
| Jul 17 | Axiom Equity, Mercia (investors) | Risk Ledger | $32M Series B | Network-first third-party risk management platform mapping supplier risk at depth; US expansion; addresses supply-chain cyber gap in enterprise vendor risk programmes | https://www.securityweek.com/risk-ledger-raises-32-million-in-series-b-funding/ |
| Jul 16 | Signicat | Inverid | Undisclosed | Dutch NFC-based digital identity verification company behind ReadID, used by 50+ organisations including Rabobank, ING, Entrust and government entities in UK and Denmark; deal strengthens Signicat's EU digital identity platform ahead of EUDI Wallet rollout; Inverid tripled revenue under Main Capital ownership; founders reinvesting proceeds into Signicat | https://www.signicat.com/press-releases/signicat-acquires-inverid |
| Jul 16 | CrowdStrike | XM Cyber (IP acquisition from Schwarz Digits) | Undisclosed (IP-only) | 45+ patents and proprietary source code for exposure management and attack-path analysis added to Falcon; Schwarz Digits simultaneously expands sovereign-cloud partnership bringing Falcon to STACKIT cloud for European sovereign deployments | https://ir.crowdstrike.com/news-releases/news-release-details/crowdstrike-and-schwarz-digits-expand-strategic-partnership · https://www.calcalistech.com/ctechnews/article/rkx9rod4zl |
| Jul 16 | NINJIO | SafeStack | Undisclosed | Developer-focused secure coding and AppSec training platform; NINJIO had been reselling SafeStack's Secure Code product, making this a vertical integration acqui-hire that embeds secure-code training natively into NINJIO's human-risk management platform (Gauge Capital portfolio) | https://www.prnewswire.com/news-releases/ninjio-acquires-safestack-to-expand-human-risk-management-platform-with-secure-code-training-302827087.html |
| Jul 15 | Accel, Greylock, CRV, Hetz, AlphaDrive (investors) | Oak | $60M seed | AI-native Identity Operating System replacing fragmented legacy IGA/IAM stack with a single continuous control plane governing all human, machine, and AI agent identities; founded Dec 2025 by ex-SentinelOne (CEO Shai Morag); already GA and deployed across enterprise customers | https://www.securityweek.com/oak-emerges-from-stealth-mode-with-60-million-in-funding/ · https://techcrunch.com/2026/07/15/backed-by-60m-in-funding-oak-steps-out-of-stealth-to-fix-the-identity-mess-that-ai-agents-are-making-worse/ |
| Jul 15 | Foundation Capital, Zetta Venture Partners (investors) | Pulse Security | $8M seed | AI-powered CISO operational management platform: program visibility, business-risk communication, board reporting | https://www.globenewswire.com/news-release/2026/07/15/3327850/0/en/Pulse-Security-Debuts-Operational-Management-Platform-Built-for-Security-Leaders.html |
| Jul 14 | Cribl | CardinalOps | ~$100M est. | AI-native detection-engineering platform; automates SIEM rule translation and coverage-gap analysis; new Tel Aviv R&D hub; extends Cribl AI platform into full AI-SOC offering | https://www.globenewswire.com/news-release/2026/07/14/3327113/0/en/cribl-acquires-cardinalops-to-further-expand-its-ai-platform-into-security-operations.html |
| Jul 13 | NEA, Lightbank, XTX, Sequoia (investors) | Valarian | $50M Series A | Sovereign and air-gapped AI compute infrastructure for defense and regulated sectors; first NEA bet on a European defense-tech startup | https://www.securityweek.com/valarian-raises-50-million-for-sovereign-infrastructure-control-layer/ |
| Jul 9 | Bessemer Venture Partners, Merlin Ventures, Evolution Equity Partners, Singtel Innov8 (investors) | QIZ Security | $17M seed | Post-quantum cryptography orchestration: inventories cryptographic assets, manages migration to PQC-compliant algorithms; ecosystem with Cisco, AWS, Google, CrowdStrike | https://www.securityweek.com/qiz-security-raises-17-million-for-cryptographic-governance-platform/ |
| Jul 7 | Barracuda Networks | Evo Security | Undisclosed | PAM/IAM specialist for MSPs — multi-factor authentication, privileged access management, and identity controls integrated into the BarracudaONE platform; positions Barracuda as a single-vendor security stack for MSP customers with native identity governance alongside its existing email, network, and application security | Barracuda PR · Help Net Security · SiliconANGLE |
| Jul 3 | Zurich Insurance Group | BOXX Insurance | Undisclosed | Toronto-based global cyber insurtech (retail + SME cyber insurance across 5 continents; prior Zurich partnership since 2021); BOXX continues operating as a standalone entity integrated into Zurich Global Ventures (ZGV); accelerates Zurich's cyber coverage and protection services for retail and SME customers globally; BOXX's all-in-one cyber insurance + security services model extends Zurich's position in the SME cyber market that large commercial insurers have historically underserved | BOXX PR · Reinsurance News · InsurTech Digital · Insurance Business |
| Jul 3 | Viatel Technology Group | FullProxy | Undisclosed | Glasgow-based cybersecurity consultancy; Viatel expands its UK & Ireland security portfolio with a specialist firm serving healthcare, public sector, education, and CNI verticals; FullProxy brings penetration testing, managed security services, and security consulting capabilities | digit.fyi · Viatel PR · SiliconRepublic |
| Jul 1 | LevelBlue | Trustwave | Undisclosed | MSSP consolidation forming world's largest pure-play managed security services provider; Trustwave brings SpiderLabs (threat research, intelligence, threat hunting), MDR, offensive security, strategic advisory, incident response, and security software; combined entity also includes Stroz Friedberg and Elysium Digital; LevelBlue is the AT&T Cybersecurity spinoff (Dallas TX); deal positions LevelBlue to serve SMB through large enterprise and public sector | LevelBlue PR · MSSP Alert · SecurityBrief · GovConWire |
| Jul 1 | Qualcomm | SAM Seamless Network (Securing Sam Ltd.) | >$150M | Israeli IoT/connected-device security startup protecting 500M+ devices across 15M+ ISP/telco networks; customers include AT&T, Verizon, Bezeq (Israel), Telenet (Belgium), Virgin Media (UK); SAM's on-device security layer protects home/enterprise IoT environments at network edge without routing traffic through the cloud; fits Qualcomm's edge-AI strategy — thickening on-device protection reduces cloud compute dependency and extends Snapdragon platform value into CNI and enterprise IoT security | CTech/Calcalist · Globes · MarketScreener · Telecompaper |
June 2026¶
| Date | Buyer | Target(s) | Value | Rationale | Source |
|---|---|---|---|---|---|
| Jun 30 | Aikido Security | Root | ~$70M | Belgian open-source AppSec unicorn ($1B valuation) acquires Israeli startup Root.io; Root deploys AI agents to generate and ship backported patches for vulnerable open-source library versions in 15–40 minutes — without forcing major version upgrades that break APIs; integrates into Aikido's platform as "Aikido Libraries," extending Aikido's ASPM from scanning into autonomous remediation for software supply-chain vulnerabilities | Help Net Security · Aikido Blog · CTech · GlobeNewswire |
| Jun 29 | Intrusion Inc. | VigilAigent (from Tego Cyber) | Undisclosed | AI-native MSSP acquisition (~$3.5M ARR, 80+ reseller partners); combines VigilAigent's "The Oracle" agentic AI threat-detection engine with Intrusion's TraceCop platform; positions Intrusion as an AI-native managed security provider for SMB and mid-market | PR Inside/GlobeNewswire · StockTitan · SEC Form 8-K |
| Jun 29 | CyberFOX | Timus Networks | Undisclosed | Tampa FL-based SASE + IAM startup for MSPs; adds secure web browsing, zero-trust network access, and adaptive access-policy enforcement to CyberFOX's single-vendor MSP security stack; both companies are Tampa-based and MSP-focused, creating an integrated SASE + endpoint + identity bundle | ChannelPro Network |
| Jun 26 | Cyera | Otterize | Undisclosed (~tens of millions) | Cloud-native non-human identity (NHI) security startup (founded 2022; eBPF-based runtime agent that discovers and controls sensitive data flows in microservices and cloud-native workloads); Cyera's sixth acquisition, bolstering its DSPM and AI-governance stack with real-time data-lineage and workload-identity controls; Otterize backed by Index Ventures (raised $11.5M seed); co-founders are IDF 8200 alumni + former CTO of MuleSoft | Cyera PR · CTech |
| Jun 22 | Booz Allen Hamilton | Ultra I&C Mission Solutions (from Cobham Ultra / Advent International) | $720M | Mission-critical software, encryption, and edge-compute products for US and allied defence and intelligence agencies; cryptographic and signals-processing products for classified programs; Cobham Ultra retains its radar, sonar, and countermeasures divisions; close Q2 FY2027 (targeting September 2026); double-digit revenue growth and >20% EBITDA margins projected per Booz Allen guidance; a sovereign capability play distinct from the NHI/SaaS consolidation wave | Booz Allen PR · BusinessWire · WashingtonExec · SEC 8-K |
| Jun 22 | Cisco | WideField Security | Undisclosed | Identity-lifecycle security to extend Splunk's Agentic SOC (identity, credentials, sessions, blast radius) | SecurityWeek |
| Jun 22 | F5 | SurePath AI | Undisclosed | Denver-based shadow AI detection and discovery startup (~19 employees, ~$6M raised); powers F5's AI Security Platform with network-based AI discovery identifying AI usage across the enterprise including shadow AI without requiring direct application integrations; 88% of organisations report AI-related security challenges per F5's 2026 State of Application Strategy Report; extends F5's application delivery portfolio into the AI governance and shadow-AI security layer | F5 PR · Help Net Security · GeekWire |
| Jun 18 | Accenture | Dragos (majority) + runZero + NetRise | ~$4.17B (Dragos valued $3.25B) | Move from OT services into OT security software; Dragos stays standalone, runZero (asset discovery/exposure) + NetRise (firmware/supply-chain) fold under it. ~$208M ARR, +53% YoY. Close Aug–Sep 2026 | SecurityWeek · Industrial Cyber |
| Jun 18 | Group 11, Bicycle Capital, Bain Capital Ventures (+ others) | Dream (funding round — Series C) | $260M ($3B valuation) | Sovereign AI and national cyber defense platform for governments; three products: Sphere (CNI/nation-state threat defense), Hero (AI-powered autonomous vulnerability hunting), Atlas (national data/intelligence integration); $130M+ ARR; serving 6 governments; co-founded by Shalev Hulio (former CEO, NSO Group), Sebastian Kurz (former Austrian PM), and Gil Dolev; HQ Tel Aviv with offices in Vienna and Abu Dhabi; positioned as sovereign alternative to US/Chinese hyperscaler AI dependency | SecurityWeek · PR Newswire · Times of Israel |
| Jun 16 | Databricks | Panther | Undisclosed | AI SOC / agentic detection platform; Panther built a security lakehouse-native SIEM enabling real-time threat detection at Databricks scale; integrates with Lakewatch (Databricks' agentic SIEM, launched Mar 2026 via Antimatter+SiftD.ai acquisitions); positions Databricks as a full-stack security analytics vendor — from data ingestion to detection engineering to AI-agent investigation; extends the "security lakehouse" model to disrupt legacy SIEM | Databricks PR · Infosecurity Magazine |
| Jun 15 | SailPoint | Entro Security | ~$200M est. | Israeli NHI / AI-agent identity security startup (Tel Aviv; $24M raised seed+Series A; covers 1,000+ NHI/agent types, 1,200+ credential types across 70+ enterprise sources; proprietary NHIDR — non-human identity detection and response for behavioral anomaly monitoring of AI agents and machine identities in real time); integrates into SailPoint Agentic Fabric to expand coverage across the full identity ecosystem from human to non-human to AI agent; closed June 29, 2026 — one of the fastest close timelines of the year | SailPoint PR · GlobeNewswire close · SiliconANGLE · SC Media |
| Jun 15 | 1Password | Apono | $250M–$300M (est.) | Israeli just-in-time privileged access management startup (80 staff, ~50 in Israel); dynamically grants and auto-revokes temporary narrowly scoped permissions for humans, machines, and AI agents at the moment of need — eliminates standing accounts and persistent privileges; positions 1Password as the "control plane" for access governance in the agentic workforce, extending from credential management into behavioral-access monitoring; 1Password PR states "over $200M," Calcalist reports $250M–$300M | 1Password PR · SecurityWeek · CTech |
| Jun 1 | Dragos | Phosphorus | Undisclosed | xIoT/xOT security specialist (Nashville; ~$65M total funding, $38M round 2022); adds asset discovery, vulnerability management, and threat detection for billions of connected devices embedded in critical infrastructure (IIoT, medical IoT, smart-building, building automation); extends Dragos Platform's TAM to $50B+ | Dragos PR · BusinessWire · SecurityWeek |
May 2026¶
SecurityWeek: 26 deals announced in May 2026.
| Date | Buyer | Target(s) | Value | Rationale | Source |
|---|---|---|---|---|---|
| May 26 | Paessler AG | UVnetworks | Undisclosed | German IT/OT monitoring vendor (PRTG Network Monitor) acquires UVnetworks (maker of UVexplorer/UVexplorer Server — automated network topology discovery, inventory, and configuration backup); UVexplorer integrates as a native PRTG plugin, closing the gap between monitoring and network-context visibility for incident response; extends Paessler's TAM into network operations and OT security monitoring beyond its traditional IT heartbeat/SNMP roots | PR Newswire · ChannelE2E · Paessler PR |
| May 24 | Cyera | Genie Security | ~$50M | Six-month-old Israeli endpoint data-loss prevention startup; prevents sensitive data leaks from generative AI tools in real time; extends Cyera's DSPM ecosystem to the endpoint; Cyera's fifth acquisition, valued at $9B ($400M Series F) | CTech · Times of Israel · SecurityWeek |
| May 22 | Cycurion | Secuvant | $2.875M | Automated SOC-as-a-Service with AI-driven threat detection and response; complements HavenX platform ($875K cash + 888,888 preferred shares; close within 7–10 days) | GlobeNewswire · SecurityWeek |
| May 21 | Zscaler | Symmetry Systems | Undisclosed | Identity-mapping and data-access security for AI agents; Symmetry's "Access Graph" maps every human and non-human identity interaction across an enterprise, integrating with Zscaler Zero Trust Exchange to govern AI agent-to-agent communication at scale; fills a critical visibility gap as AI agents multiply service-account proliferation | Zscaler PR · Nasdaq/IR · StockTitan/8-K |
| May 19 | Check Point | Deepchecks | ~$15M | Israeli AI evaluation startup — team + IP acqui-hire; LLM evaluation and continuous monitoring integrated into Check Point's Agentic Network Security Orchestration platform; Check Point's fourth Israeli acquisition in 2026 (after Cyclops, Cyata, Rotate) | CTech · Security Boulevard · BankInfoSecurity |
| May 18 | Torq | Jit | ~$70M est. | AI context-graph firm; adds org-specific context to Torq's AI SOC platform for agentic investigations; ~30-person team joins Torq; deal not officially disclosed but estimated at ~$70M across multiple Israeli tech sources | CTech · BusinessWire · BankInfoSecurity |
| May 14 | Akamai | LayerX | $205M | Browser-based AI usage control / secure enterprise browser; workforce-security strategy. Closed July 2, 2026. | SecurityWeek · Help Net · GlobeNewswire close |
| May 14 | SecurityScorecard | Driftnet | Undisclosed | Internet-scanning / next-gen threat intel engine into the TITAN AI platform for third-party-risk | SecurityScorecard · SiliconANGLE |
| May 7 | Cycurion | Halo Privacy + HavenX | Undisclosed | Secure communications + forensic attribution; government-grade privacy and active-defense stack atop Cycurion's existing cybersecurity services; close targeted end of June 2026 (NASDAQ: CYCU) | GlobeNewswire · SecurityWeek |
| May 6 | WatchGuard | Perimeters.io | Undisclosed | Cloud Application Security SaaS for MSPs (founded 2022; ~30 staff, Wilmington DE; scans SaaS environments for misconfigurations across 40+ apps including M365, Salesforce, and OpenAI); simultaneous launch of WatchGuard CloudDR (Cloud Detection and Response) — continuous visibility, detection, and automated response for MSP multi-tenant cloud environments | WatchGuard PR · GlobeNewswire · BankInfoSecurity |
| May 4 | Cisco | Astrix Security | ~$400M | Israeli NHI (non-human identity) security startup — API keys, service accounts, OAuth tokens, AI agent credentials; integrates into Cisco's identity security layer for the agentic workforce; Cisco's largest Israeli acquisition since 2024 | Cisco Blogs · SecurityWeek · CTech |
| May 1 | Datavault AI (NASDAQ: DVLT) | CyberCatch (TSXV: CYBE) | ~CAD $136.8M (~USD $100M) all-stock | AI-enabled cyber risk mitigation and quantum-resistant security integration; CyberCatch's SaaS platform proactively discovers and remediates cyber risks in real time; acqui-hire + tech play to embed PQC into Datavault's SanQtum-secured edge ecosystem; CyberCatch valued at ~CAD $5.11/share (2.2× market premium); CyberCatch operates as Datavault subsidiary with founder Sai Huda as president | FinanceWire · Seeking Alpha · AccessNewswire |
April 2026¶
| Date | Buyer | Target(s) | Value | Rationale | Source |
|---|---|---|---|---|---|
| Apr 30 | Everfield Germany | Rhebo (sold by Landis+Gyr) | High single-digit M USD | OT/IIoT network anomaly-detection software (Leipzig, est. 2014; part of Landis+Gyr since 2021); Everfield expands its OT software vertical in DACH markets (existing: ondeso OT management); Landis+Gyr exits to refocus on core energy-metering business | Landis+Gyr PR · Industrial Cyber |
| Apr 30 | Palo Alto Networks | Portkey | $120–140M est. | AI Gateway startup — centralised control plane to manage, route, and secure AI agent-to-agent and app-to-model traffic (processes trillions of tokens/month); integrates into Prisma AIRS to govern agentic AI at low-latency scale; close expected fiscal Q4 2026 | Palo Alto Networks PR · GuruFocus · Pulse2 · CTech |
| Apr 28 | Silverfort | Fabrix Security | Undisclosed (est. tens of millions) | Israeli AI-native identity security startup (Tel Aviv); adds autonomous runtime identity protection — monitors and secures identity behaviors in real time, detecting anomalous service-account, machine-identity, and AI-agent activity across hybrid and multi-cloud environments; extends Silverfort's unified identity protection platform with AI-driven detection and response for the agentic workforce era | PR Newswire |
| Apr 28 | Socket | Secure Annex | Undisclosed | Browser and editor extension security startup (John Tuckner, founder); extends Socket's open-source supply-chain security platform beyond npm/PyPI packages into browser extensions (Chrome/Edge), VS Code extensions, MCP servers, and AI skills — closing a high-risk visibility gap where attackers embed malicious code in developer tooling; customers include Reddit, Brave, Torq, and Movable Ink; Socket now protects 14,000+ orgs and 1.2M code repositories | Socket Blog · BankInfoSecurity · EINPresswire |
| Apr 28 | Spin.AI | Revyz | Undisclosed | Atlassian Jira/Confluence backup and SSPM specialist (Atlassian Gold Marketplace Partner); extends Spin.AI's data resiliency and security posture management platform to the Atlassian ecosystem alongside Google Workspace, Microsoft 365, and Salesforce; combined platform covers automated backup, configuration drift detection, sandbox-to-production workflows, ransomware protection, eDiscovery, DLP, and SSPM across six SaaS platforms | Spin.AI PR · Newsfile · Seeking Alpha |
| Apr 23 | Cyera | Ryft | Undisclosed (~$100–130M est.) | AI-agent data lake security (est. 2024, backed by Index Ventures / Bessemer; open-standard data lake with automated governance, compliance, DR); builds unified control plane for AI agent data access; Cyera's fourth acquisition, valued at $9B post $400M Series F | Cyera PR · SiliconANGLE |
| Apr 21 | TekStream | ImagineX (cybersecurity division) | Undisclosed | Atlanta-based digital transformation firm acquires ImagineX's cybersecurity practice (Cyber Strategy & Advisory, vCISO, GRC, CTEM, IAM); positions TekStream as an end-to-end digital resilience provider from board-level strategy through SOC operations | PR Newswire · BankInfoSecurity |
| Apr 21 | Airbus | Quarkslab | Undisclosed | French cybersecurity firm (~100 staff, Paris/Rennes; QShield protects software against AI-driven reverse engineering and adversarial threats); adds sovereign EU cyber R&D to Airbus Defence and Space's pan-European portfolio (alongside Infodas/DE, Ultra Cyber/UK); backed by Tikehau Capital since 2020 | Airbus PR · GovInfoSecurity |
| Apr 11 | Fortreum | Kovr.AI | Undisclosed | FedRAMP-authorized AI-native compliance automation platform; adds AI-driven compliance readiness, audit preparation, and evidence-collection automation to Fortreum's federal cybersecurity and cloud consulting practice; Fortreum specialises in FedRAMP assessments and federal cloud security | BusinessWire |
| Apr 9 | Cisco | Galileo Technologies | Undisclosed | AI agent observability and evaluation platform; extends Splunk Observability Cloud with agent tracing, quality evaluation, and production AI guardrails; closed May 22, 2026 | NetworkWorld · ChannelE2E · Futurum Group |
| Apr 2 | Fortra | Zero-Point Security | Undisclosed | UK red-team training firm (est. 2018; Red Team Ops I & II courses, hands-on adversary emulation and penetration testing); Fortra's 21st acquisition — expands Cobalt Strike / Core Impact / Outflank offensive portfolio with specialized training and purple-team capability | Fortra PR · Security Today |
March 2026¶
| Date | Buyer | Target(s) | Value | Rationale | Source |
|---|---|---|---|---|---|
| Mar 26 | Rapid7 | Kenzo Security | Undisclosed | Agentic AI platform for autonomous SOC investigations and preemptive threat detection; no material ARR/profitability impact per Rapid7 | Rapid7 IR · SecurityWeek |
| Mar 24 | Ekinops | Chimere | Undisclosed | French universal ZTNA startup (Paris); Chimere's agent-agnostic ZTNA platform securely interconnects all endpoints with all enterprise resources regardless of OS, device type, or location; positions Ekinops as the sole European single-vendor SASE company globally (combining existing Olfeo SWG/May 2025 and new Chimere ZTNA); transaction completed before March 31, 2026 | Ekinops PR · PRNewswire · Morningstar |
| Mar 24 | Databricks | Antimatter + SiftD.ai | Undisclosed | Powers Lakewatch, Databricks' new open agentic SIEM; Antimatter adds AI-agent authentication/authorization (Berkeley researchers); SiftD.ai adds SPL-originated large-scale detection engineering (Splunk founders) | Databricks PR · TechCrunch · SiliconANGLE |
| Mar 23 | Airbus Defence and Space | Ultra Cyber Ltd | Undisclosed | UK sovereign cybersecurity firm (200+ staff, Maidenhead cyber centre of excellence); cryptography and data security for UK MoD programs + specialised airborne datalinks capability; joins Airbus' Connected Intelligence business unit alongside prior acquisitions Quarkslab (FR, Apr 2026) and Infodas (DE); closes H2 2026 subject to regulatory approval; seller: Cobham Ultra (Advent International portfolio) | Airbus PR · Advent International · SecurityWeek |
| Mar 19 | AppViewX | Eos | Undisclosed | AI-native Identity Control Plane for AI agents and autonomous workloads; AppViewX (CLM/PKI automation) acquires Eos (agentic governance + privileged access control for AI agents and machine identities in cloud and hybrid environments); integrates into AppViewX platform to deliver end-to-end machine and AI agent identity security; Eos co-founders become AppViewX CEO + CTO | AppViewX PR/GlobeNewswire · Help Net Security |
| Mar 11 | Leonardo | Becrypt | Undisclosed | Italian aerospace, defense, and security multinational acquires UK-based data-protection and secure-mobile cybersecurity firm (encryption, secure OS, government-grade device security; founded 1996, ~100 specialists, London); expands Leonardo's cybersecurity footprint into UK sovereign/government markets; deal subject to regulatory approval, expected to close Q2 2026 | https://ukdefencejournal.org.uk/leonardo-to-acquire-uk-cyber-firm-becrypt/ · https://www.becrypt.com/becrypt-joins-forces-with-leonardo-to-expand-global-cyber-security-reach/ |
| Mar 10 | Accel, GV, Kleiner Perkins, Menlo Ventures, 8VC, Ballistic Ventures, In-Q-Tel (+ others) | Armadin (funding round — combined seed + Series A) | $189.9M | Autonomous AI cybersecurity agent startup founded by Kevin Mandia (former Mandiant CEO / Google Cloud cybersecurity chief) in September 2025; Armadin creates AI agents that autonomously scan for threats and conduct red-teaming without human intervention; 60+ employees at launch; working with Fortune 100 companies; combined seed + Series A is reportedly a record for a security startup at that stage; Accel leads, with GV (Google Ventures), Kleiner Perkins, Menlo Ventures, 8VC, Ballistic Ventures (Mandia co-founded), and In-Q-Tel (CIA) participating | SecurityWeek · TechCrunch · CNBC · GovInfoSecurity |
| Mar 9 | OpenAI | Promptfoo | Undisclosed (last valued ~$86M, Jul 2025) | Agentic AI security testing; integrates into OpenAI's Frontier platform to identify and remediate AI-system vulnerabilities during development | OpenAI · SecurityWeek · TechCrunch |
| Mar 3 | Giesecke+Devrient (G+D) / Veridos | XTec | Undisclosed | US federal-grade identity, authentication, and access management specialist (FedRAMP High authorized — the only ICAM ecosystem certified at this level; long-standing relationships with 105+ US federal agencies; cryptographic tokens and smart access systems for government and regulated enterprises); integrated into Veridos (G+D's joint venture with Bundesdruckerei, the German federal government ID technology group); closed February 27, 2026, announced March 3; expands G+D's Digital Security Segment and Veridos' federal credentialing footprint | G+D PR · GlobeNewswire · Biometric Update |
| Mar 2 | Quantum eMotion | SKV Technology Inc. | Undisclosed | Canadian quantum-resistant security firm acquires SKV Technology (Ottawa; hardware security modules and post-quantum cryptography integration); expands Quantum eMotion's quantum-safe product portfolio for financial services and critical infrastructure; closed March 2, 2026 | Quantum eMotion PR · SEC Filing |
| Mar 2 | Zurich Insurance | Beazley | $10.9B (~£8.1B) | Specialty insurer (cyber, marine, aviation, space, fine art); Beazley is one of the world's largest cyber insurers with Full Spectrum Cyber offering combining coverage + in-house IR + proactive security services; combined ~$15B specialty GWP; close H2 2026 subject to regulatory approval | Zurich PR · Insurance Journal |
February 2026¶
| Date | Buyer | Target(s) | Value | Rationale | Source |
|---|---|---|---|---|---|
| Feb 27 | Quantum eMotion | Jet Lab Technologies (SecureKey platform) | Up to $15M (royalties over 5 years) | QeM acquired Jet Lab's SecureKey cryptographic-software platform to combine it with its QRNG-powered Sentry-Q layer, creating a full-stack quantum-resilient security architecture spanning cloud, network, endpoint, and chip; distinct from QeM's concurrent March acquisition of SKV Technology hardware security modules | GlobeNewswire |
| Feb 23 | Experian | AtData | Undisclosed | Email identity intelligence specialist (world's most comprehensive email insights technology; 10B+ email addresses globally; 98% coverage of active North American email addresses; real-time signals on validity, deliverability, fraud risk, identity linkage); Experian integrates AtData into its identity and fraud decisioning platforms to close gaps in email-based authentication and fraud prevention; Experian's first acquisition in 16+ years | Experian PR · Finovate · RegTech Analyst |
| Feb 18 | Palo Alto Networks | Koi | ~$400M est. | Agentic endpoint security startup (secures unvetted browser extensions, AI tools, and developer add-ons that employees install — the "last mile" of the modern attack surface); technology folds into Cortex XDR and Prisma AIRS to govern AI agent-level endpoint risk; closed April 14, 2026 | Palo Alto Networks PR · KuppingerCole · Futurum Group |
| Feb 17 | Booz Allen Hamilton | Defy Security | Undisclosed | Cyber services and consulting firm; expands Booz Allen's global commercial business into UK/EU financial services, health/life sciences, manufacturing, and energy markets | Booz Allen PR · SecurityWeek |
| Feb 17 | ITC Secure + IronNet (merger) | Collective Defence (new co.) | Undisclosed | UK-headquartered ITC Secure (30+ years managed security / SOC operations) merged with IronNet's collective-defense network-detection platform to form Collective Defence — a Luxembourg-domiciled critical-infrastructure protection company targeting state-sponsored hybrid-warfare threats; combined entity serves CNI operators across financial services, energy, and government | BusinessWire |
| Feb 12 | Proofpoint | Acuvity | Undisclosed | AI enterprise security and governance startup (founded 2023, 24 staff, $9M seed Foundation Capital; emerged from stealth Sep 2024); delivers visibility, governance, and runtime protection across the full AI/agent-driven workspace — from browser endpoints and MCP servers to locally installed models; enables Proofpoint to govern shadow AI usage, prevent sensitive data exposure to GenAI services, and defend against prompt injection and model-manipulation attacks; extends the human-centric security platform into the agentic workforce era | Proofpoint PR · Help Net Security · CyberScoop |
| Feb 12 | Check Point | Cyata + Cyclops Security + Rotate | ~$150M total (~$85M to Cyclops) | Three Israeli startups acquired simultaneously to build an end-to-end AI security platform: Cyata (AI agent identity management — discover active agents, map permissions, monitor behavior, enforce policy; founded 2024); Cyclops (internal asset discovery + continuous threat exposure management — integrates with 150+ systems across SaaS, cloud, on-premises, IoT/OT, endpoints and workloads); Rotate (unified MSP management and scalability for mid-market customers); Check Point's fourth through sixth Israeli acquisitions in 2026 | Check Point PR · CTech · BankInfoSecurity · SC Media |
| Feb 11 | Palo Alto Networks | CyberArk | $25B | Bring identity security into the core platform; largest pure-play cyber deal of 2026 | Verdict |
| Feb 11 | Cellebrite | SCG Canada, Inc. | Undisclosed | Drone/UAV digital forensics leader; access to data from 80+ UAV types (flight logs, video, cell tower data, telemetry); extends Cellebrite's AI platform for law enforcement, defense, and intelligence customers; closed March 2, 2026 | Cellebrite PR · Newswire.ca |
| Feb 11 | Endor Labs | Autonomous Plane | Undisclosed | Cloud-native AppSec startup (founded by Kyle Quest, creator of DockerSlim); adds full-stack reachability from code to container — SCA findings correlated with container image vulnerabilities, runtime profiling to identify genuinely exploitable vulns; eliminates up to 90% of false positives typical of conventional scanners; extends Endor Labs' AI-native application security platform | Endor Labs PR · fintech.global |
| Feb 10 | Sophos | Arco Cyber | Undisclosed | UK-based cybersecurity assurance company (~30 staff; specialist in controls optimization and governance automation); Sophos integrates Arco's capabilities into its CISO Advantage offering, delivering AI-powered cybersecurity governance to organisations that lack dedicated security leadership — one of the only MDR vendors to bundle CISO-level advisory at scale | Sophos PR · GlobeNewswire · SecurityWeek |
| Feb 5 | Zscaler | SquareX | Undisclosed | Browser security / zero trust for the AI era; extends Zscaler's inline proxy architecture into the browser layer for AI-agent traffic and data controls | Zscaler IR · SecurityWeek |
| Feb 3 | Varonis | AllTrue.ai | $150M | AI trust, risk, and security management (TRiSM); enables Varonis customers to monitor and govern AI agent behavior and reduce AI-introduced data risks | GlobeNewswire · SecurityWeek |
| Feb 3 | Logicalis US | Maple Woods Enterprises | Undisclosed | Managed security services provider; adds Maple Woods' "Overwatch" cybersecurity and compliance program (built to federal/regulated-sector standards) to Logicalis's services framework, expanding into healthcare and SLED (state, local, education) markets | PR Newswire |
| Feb (TBD) | Arctic Wolf | Sevco Security | Undisclosed | Attack surface management (ASM) into Arctic Wolf's managed SOC platform; improves asset inventory and exposure visibility for managed detection customers | SecurityWeek |
January 2026¶
| Date | Buyer | Target(s) | Value | Rationale | Source |
|---|---|---|---|---|---|
| Jan 29 | Palo Alto Networks | Chronosphere | $3.35B | Cloud-native observability for AI-era data volumes; visibility/security at scale | CTech |
| Jan 27 | LevelBlue | Alert Logic MDR (from Fortra) | Undisclosed | MSSP consolidation: LevelBlue acquires Fortra's Alert Logic managed detection and response (MDR), extended detection and response (XDR), and web application firewall (WAF) services business; Fortra transitions to a technology partner; extends LevelBlue's managed security services portfolio and customer base in the SMB and mid-market segments | CyberScoop · LevelBlue PR |
| Jan 26 | Radware | Pynt | Undisclosed | Israeli API security testing startup; adds automated pre-production API security testing + dynamic vulnerability discovery to Radware's API portfolio; extends protection across the full API lifecycle from design through runtime; acquired at close (not just announced) | GlobeNewswire/Security Solutions Media · SecurityWeek |
| Jan 26 | OVHcloud | Seald | Undisclosed | French E2E encryption startup with ANSSI CSPN security visa; zero-knowledge model encrypts data client-side before upload — neither host nor admin can access plaintext; Seald SDK natively integrated into OVHcloud's Secret Manager, KMS, and HSM catalogue; sovereign European cloud data-protection play | OVHcloud PR · Channel Web · SecurityWeek |
| Jan 15 | Delinea | StrongDM | Undisclosed | PAM leader acquires JIT runtime authorization and universal access management (infrastructure, databases, AI agents); eliminates standing credentials in favour of access granted at the moment of action; closed March 5, 2026 | Delinea PR · MSSP Alert |
| Jan 15 | Parsons Corporation | Altamira Technologies (from ClearSky) | ~$385M ($340M base + $45M earn-out) | National security IT and cybersecurity services firm (McLean, VA; 600+ employees, 90%+ clearance-holders); delivers advanced analytics, SIGINT, cyber, missile warning, and space capabilities; adds to Parsons' Defence & Intelligence unit; closed January 15, 2026 | Parsons IR · GlobeNewswire · SecurityWeek |
| Jan 14 | Infoblox | Axur | Undisclosed | AI-powered external threat discovery and digital risk protection; adds brand-abuse, credential-exposure, and phishing takedown capabilities (40M+ URLs/day scanned); closes May 5, 2026 | Infoblox PR · BankInfoSecurity |
| Jan 13 | CrowdStrike | Seraphic Security | ~$420M | Israeli browser runtime security firm; decouples security from the browser itself — enforces policy within Chrome, Edge, Safari, Firefox, and agentic browsers on managed and unmanaged devices alike; turns any browser into a secure enterprise browser without forced migration; closes Q1 FY27 | CrowdStrike PR · CTech · CyberScoop |
| Jan 12 | OneSpan | Build38 | Undisclosed | Mobile app protection SDK spinoff from Giesecke+Devrient; adds client-side on-device app-shielding, runtime application self-protection (RASP), and SDK hardening to OneSpan's identity verification and e-signature portfolio; closed March 2, 2026 | OneSpan IR · SEC 8-K |
| Jan 8 | ThreatModeler | IriusRisk | $100M+ | Spain-based threat modeling platform (Paladin Capital-backed); unites the top two enterprise threat modeling platforms; $50M combined ARR; positions for AI-era design-time security in the application security market; deal closed end-2025, announced Jan 8 | Fortune · PRNewswire · ThreatModeler PR |
| Jan 8 | CrowdStrike | SGNL | $740M | Continuous identity and dynamic authorization startup; grants/revokes access for human, non-human (NHI), and AI agent identities in real time based on contextual risk — eliminates standing privileges; integrates into Falcon Identity Protection; closes Q1 FY27 | CrowdStrike PR · The Register |
| Jan 8 | JumpCloud | MacSolution | Undisclosed | Brazil's largest JumpCloud MSP (São Paulo); acqui-hire to build a LatAm GTM hub for JumpCloud's open directory/identity platform; expands JumpCloud's presence in the largest enterprise IT market in South America | JumpCloud PR · SiliconANGLE |