💼 M&A Tracker

Newest deals on top · scroll inside the panel for the full history. Colour bands mark each month.

October 2026

Oct 28 Alchemy Technology Group → Freeit Data Solutions Undisclosed Houston-based IT advisory/reseller (backed by Avance Investment Management) adds Freeit's 16+ years of Texas SLED (state/local/education) procurement relationships and cybersecurity services -- Alchemy's third disclosed acquisition in 2026 · PR Newswire · Dealroom

Oct 22 Intelligent Protection Management Corp. → Advanced Technology Distributors (IT/telecom/connectivity/managed-services business) Up to $2.7 million (cash plus note and earnout, two-stage close, before customary adjustments) IPM (Nasdaq: IPM), a managed technology solutions provider focused on cybersecurity and cloud infrastructure, adds AdTech's managed-services customer base as a bolt-on, continuing the growth-by-acquisition strategy it began with its January 2025 purchase of Newtek Technology Solutions. · SEC 8-K

Oct 22 Forte Technologies → Business Cyber Security Solutions (BCSS) Undisclosed Lookback catch-up: Forte Technologies (managed IT/cloud/cybersecurity provider) acquires BCSS (Inverness, IL compliance firm, founded 2016, serves MSPs and defense contractors with CMMC/HIPAA/SOC2/PCI DSS/GLBA/ISO compliance validation), relaunching it as the Forte Cyber Assurance practice with security implementation kept separate from independent evaluation. · citybiz · Fundz

Oct 21 EC-Council → Cyber Insurance Academy Undisclosed EC-Council (EQT-backed cybersecurity certification/training company) expands from pure cybersecurity training into insurance-sector risk education, acquiring the Tel Aviv-based cyber-insurance training/credentialing provider; co-founders stay on, brand retained as an EC-Council Company, and its Certified Cyber Insurance Specialist credential is being rebuilt to add AI-risk/AI-governance content · GlobeNewswire · Insurance Journal

Oct 19 Hex-Rays → HexAI (formerly Ventris) Reported $30-35M (unofficial estimate, not confirmed by either company) Lookback catch-up: Hex-Rays (Belgian maker of the IDA Pro reverse-engineering tool) acquires HexAI (Tel Aviv AI-agent security-research-workflow startup, founded 2025 as Ventris, bootstrapped with no outside capital, 6 employees), bringing AI-driven vulnerability/malware research tooling in-house. · SecurityWeek · Calcalist

Oct 16 Vista Equity Partners → HID PKI business unit (IdenTrust, HydrantID, ZeroSSL) Undisclosed (unit had ~$58M 2025 revenue) ASSA ABLOY/HID carve-out sale of its PKI-as-a-service business (certificate authority, credential management, ZeroSSL); found via the private-equity-newsroom sweep (Vista's own press page), a catch-up this desk missed in-window; closing expected Q4 2026 · Vista Equity Partners · ASSA ABLOY

Oct 15 Proofpoint → Varonis Systems $6.3 billion all-cash ($49.75/share) Proofpoint (Thoma Bravo portfolio company) signs a definitive agreement to buy Varonis, adding data-security-posture-management and data-classification depth to Proofpoint's email/human-risk-centric platform to counter AI-accelerated data-exfiltration threats; Varonis had drawn earlier preliminary interest from Blackstone, Thoma Bravo and Vista. · Varonis 8-K (SEC) · CTech

Oct 15 Cohere → AISLE Undisclosed (letter of intent, not yet a binding agreement) Cohere signs a letter of intent to acquire AISLE, a San Francisco/Prague AI vulnerability-detection and remediation startup (founded by ex-Avast CEO Ondrej Vlcek, ex-Rapid7 CISO Jaya Baloo, ex-Anthropic researcher Stanislav Fort; credited with 500+ CVEs including 18 of 24 curl flaws fixed in its latest release), and stands up a new Cohere Cyber division around it; AISLE's ~50 staff expected to join. · Cohere · BetaKit

Oct 13 Bytes Technology Group → CyberOne £19.4M initial cash (+ up to £18.0M performance earnout over 16 months) Bytes Technology Group (LSE: BYIT), a UK IT/software reseller, buys CyberOne, a London-headquartered MSSP (80+ staff, UK/Philippines) with Microsoft Security Elite Partner status and £9.5M revenue (12mo to Jul 2026) -- Bytes' first acquisition since listing, deepening its Microsoft-focused MSSP offering. Subject to UK National Security and Investment Act 2021 clearance. · ComputerWeekly · Investegate RNS

Oct 13 Workday → C1.ai Undisclosed Agentic identity platform governing access for both employees and AI agents (connects to email, CRM, code repos, finance systems, cloud infra); extends Workday's Agent System of Record into access governance; announced at Workday Rising; a catch-up this desk missed in-window; closing expected Workday fiscal Q4 2027 · Workday

Oct 13 Anthropic → Opaque Systems Undisclosed (reported as a licensing/acqui-hire; Opaque had raised $24M Series B at a $300M valuation) Confidential-computing AI startup (UC Berkeley RISELab spinout) letting enterprises run AI models/agents on sensitive data without exposing it to the model provider; reports differ on deal structure — Anthropic is licensing Opaque's tech and hiring part of its team rather than a clean acquisition; a catch-up this desk missed in-window, flagged for the ambiguous structure · Constellation Research · The New Stack

Oct 12 IonQ → Elisity Up to $1.3B (all-stock, incl. up to $150M earnouts) Quantum-computing firm diversifies into cybersecurity, acquiring Zero Trust identity-based microsegmentation vendor Elisity (100+ enterprise deployments) to pair post-quantum cryptography/QKD work with enterprise Zero Trust tooling; expected to close Q4 2026 pending regulatory approval · IonQ · CNBC

Oct 6 Main Capital Partners → Raynet GmbH Undisclosed (majority stake, ~170 employees) Dutch PE firm buys majority stake (from PINOVA Capital) in the Paderborn, Germany-based IT visibility/IT asset management and cybersecurity platform 'Raynet One' to fund international expansion and buy-and-build; strong DACH base, growing North America presence · Main Capital Partners

Oct 6 Tiny → Oso Cloud $1.9M (cash, CAD) Lookback catch-up: Tiny (TSXV/OTC roll-up holding company) acquires the product and customer assets of Oso Cloud (NYC-based authorization/access-control-as-a-service startup, ~$5.3M ARR, ~80 customers; deal closed Oct 1, announced Oct 6). Oso's founding team, including CEO Graham Neray, separately joined Temporal Technologies to build AI-agent authorization controls -- a hire, not part of this acquisition. · BetaKit · CanTechLetter

Oct 5 SAIC → Information Security Corporation (ISC) Undisclosed Tuck-in acquisition of a 30+-year PKI/certificate-authority vendor (CertAgent, NIAP-approved CA on NSA's CSfC components list) to expand zero-trust architecture and post-quantum cryptography capability for defense/intelligence customers · Washington Technology · Finviz/GlobeNewswire syndication

Oct 2 SGS → Prescient Security Undisclosed SGS acquires majority stake in US compliance/cybersecurity certifier (SOC2, ISO, PCI DSS, HITRUST, FedRAMP, CMMC) to expand its Digital Trust services arm · PR Newswire · Dealroom

Oct 1 Indra Group (IndraMind) → TRC Undisclosed (30% stake, option to raise to 100% within 2 years) Deepens IndraMind's sovereign cybersecurity portfolio -- TRC (400+ staff, Madrid) protects Spanish defense, border and critical-infrastructure systems · Indra Group · Dealroom

September 2026

Sep 30 TRG (Inversion6) → Fentron Undisclosed TRG's Inversion6 cybersecurity division adds Fentron's CISO advisory, ransomware-readiness, vulnerability management and incident-response-prep practice across financial/manufacturing/government/healthcare clients · PR Newswire · PE Hub

Sep 28 Quantum eMotion → Plurilock Security ~US$24.8M (all-share-and-cash arrangement, ~100% premium to 20-day VWAP) Quantum-resistant crypto/QRNG vendor Quantum eMotion acquires Plurilock's AI-driven identity/authentication platform and commercial customer base (US/Canadian government + enterprise), converting from a technology-validation company into a revenue-generating cybersecurity business · Quantum eMotion · Plurilock

Sep 28 Bold Eagle Acquisition Corp. (Nasdaq: BEAG) → REDLattice (parent of Paragon) $1.25B pre-money enterprise value, $335M committed PIPE anchored by Loomis Sayles SPAC de-SPAC merger taking defense/offensive cyber-intelligence firm REDLattice (parent of spyware vendor Paragon) public as 'REDL', expected to close ~year-end 2026 -- a go-public listing event, not a strategic acquisition; catch-up, missed by the Sep30/Oct1 sweeps · SiliconANGLE · The Record

Sep 25 Epiq → Canopy Undisclosed Legal/eDiscovery and breach-response services firm (87%+ of breach counsel, 70%+ of cyber insurers as clients) acquires patented data-breach-response/privacy platform that assesses exposed data and identifies impacted individuals; folds into Epiq AI for Cyber · GlobeNewswire · Epiq Global

Sep 24 Shield Technology Partners → Nerds Support Undisclosed 20th MSP acquisition for Shield's consolidation roll-up platform, adding a Miami-based managed IT/cybersecurity provider with accounting, law and wealth-management vertical strength · Channel Dive

Sep 24 IBM → Logiq Consulting Undisclosed NCSC-assured UK cybersecurity consultancy (assurance, Secure by Design, secure systems engineering, secure managed services) for UK Defence/CNI/Public Sector; adds DISX sovereign-collaboration platform; extends IBM's cyber transformation portfolio alongside SiXworks · IBM Newsroom · Channelweb

Sep 24 Omada → EmpowerID Undisclosed IGA vendor adds runtime/real-time AI-agent governance to close the 'AI agent security gap' alongside its identity governance suite -- catch-up, missed by the Sep30/Oct1 sweeps · Omada · KuppingerCole

Sep 23 Upwind → Aegis Undisclosed (all-stock, reported ~$25-50M) AI-security platform vendor Upwind picks up Israeli AI-cybersecurity startup Aegis, a catch-up record for a deal missed by prior sweeps (one day before this run's 72h window, flagged by today's sweep for recording per F-23's look-back-catch-up rule). · Axios Pro · CTech

Sep 23 Nomios → Orbcom Undisclosed (~€15M annual revenue business) Nomios (pan-European cybersecurity services specialist, Keensight Capital-backed) enters Portugal/Iberia by acquiring Orbcom, a Portuguese cybersecurity-services and IT-consulting firm (~80 FTE, Palo Alto Networks Diamond Innovator partner). Catch-up record from this run's PE-newsroom sweep family. · Keensight Capital · Pulse2

Sep 22 IT Solutions Technology Partners → STACK Cybersecurity Undisclosed Philadelphia-based North American MSP acquires Detroit-metro MSSP/AI-enablement firm STACK Cybersecurity, adding cybersecurity governance/compliance and AI-adoption capabilities and expanding its Michigan footprint · PRWeb

Sep 22 A-LIGN → AssurePoint Undisclosed A-LIGN's formal entry into the Australian market, adding IRAP (Infosec Registered Assessors Program) certification capability for cloud security assessments needed by companies pursuing Australian government/public-sector contracts · PR Newswire · MSSP Alert

Sep 22 MSP Process → Triggr Undisclosed AI-powered MSP service-desk automation platform folds Triggr's Phishr security-awareness/phishing-simulation product into its automation platform · MSSP Alert · MSP Process

Sep 17 S&P Global → OpenZeppelin Undisclosed Acquires the security standard for onchain finance -- smart contract security audits and the industry-standard OpenZeppelin Contracts open-source library (behind $37T in value transferred, 900+ security engagements, 10,000+ vulnerabilities surfaced pre-production); OpenZeppelin operates as a separate unit under CEO Demian Brener, complementing S&P Global's risk-assessment and digital-asset ecosystem push as capital markets move onchain · S&P Global PR · PR Newswire · OpenZeppelin

Sep 16 Quorum Cyber → Ontinue Undisclosed Definitive agreement: Edinburgh-based Microsoft-centric MDR/IR provider buys Zurich-based MXDR provider Ontinue (Agentic SOC, five-time Microsoft partner) to form a Microsoft-first agentic SOC across North America, UK and DACH; Eterna Growth Partners stays majority investor of the combined company; subject to closing conditions · Quorum Cyber PR (PR Newswire) · Ontinue · DIGIT

Sep 16 CyberMaxx → Avertium Undisclosed Periscope Equity-backed mid-market MDR provider buys Microsoft-focused MDR/GRC/offensive-security firm Avertium (closed Sep 11, announced Sep 16); fills CyberMaxx's Microsoft MDR gap, in-sources GRC it previously outsourced, adds pen-testing/purple-teaming and new TSD channel partners (Avant, GTS); CyberMaxx's latest in a roll-up after Corvid Cyberdefense, Cybersafe Solutions and onShore Security · CyberMaxx PR · PRWeb · Channel Dive

Sep 16 Niobrara Capital → MSP Corp Undisclosed New York PE firm buys one of Canada's largest managed IT and cybersecurity services platforms (2,300+ recurring clients, ~500 staff, 12 offices across 6 provinces) from Alfar Capital, Walter Capital Partners and BDC Capital, capping a four-year Quebec-to-national roll-up; plans to deepen Canadian footprint and extend into the US · PR Newswire · PE Hub

Sep 15 eSentire → Undisclosed stealth-mode AI security startup Undisclosed Acquires an unnamed stealth-mode AI-security startup, fully incorporated into eSentire's Atlas Platform as the new Atlas AIDR module -- real-time record of AI agent activity including full conversation timeline, tool calls with inputs/outputs, token/cost accounting, latency and security events · AiThority

Sep 15 Worldwide NFT → RedTrace Technologies Undisclosed OTC-listed Worldwide NFT (WNFT) signs LOI to acquire 100% of RedTrace Technologies, a Maryland-based cyber-intelligence-driven security firm serving Federal Civilian, DoD and US Intelligence Community clients (several million dollars in annual revenue, positive run-rate EBITDA); led by former Army Signal Corps/US Cyber Command/NSA/FBI veteran Kelo Makelele. LOI stage only -- subject to due diligence and a definitive purchase agreement, expected to close Q4 2026 · GlobeNewswire

Sep 11 Kiteworks → Bonfy.AI Undisclosed Adds AI-native content-security platform (real-time classification, contextual enforcement of sensitive data across human and AI-agent workflows) to Kiteworks' runtime data-governance control plane -- catch-up, missed by prior sweeps · SecurityWeek · SC World

Sep 9 ISMG → INE Undisclosed ISMG (Information Security Media Group) acquires INE, a hands-on networking and cybersecurity training/certification provider trusted by Fortune 500 enterprises in 190+ countries; ISMG's most ambitious commitment in two decades to expand readiness training across networking, cybersecurity, identity, AI and OT security. Catch-up: missed by prior sweeps' 72h look-back window. · GlobeNewswire

Sep 9 SecureSky → Soveren Undisclosed Omaha-based exposure-management/MDR provider adds Soveren's real-time, ML-driven DSPM (London-based, eBPF network analysis) to its Active Protection Platform. Catch-up record from this run's trade-press sweep family. · PR Newswire · Dealroom

Sep 3 Xpect Solutions → Amivero Undisclosed Federal technology company expands national-security services across cybersecurity, digital modernization, AI/data and identity disciplines, adding Amivero's fraud/intelligence-ops and digital-identity work; combined firm passes 450 staff · https://www.prnewswire.com/news-releases/xpect-solutions-acquires-amivero-expanding-technical-capabilities-and-customer-depth-across-national-security-302868339.html

Sep 2 NetSPI → Synack Undisclosed Definitive merger agreement forms a combined offensive-security platform (pen testing plus continuous/crowdsourced security validation) with 800+ staff and $200M+ combined revenue; expected to close October 2026, subject to customary closing conditions. Catch-up: true announcement date Sep 2, missed by prior runs' M&A sweeps · NetSPI PR · Synack PR · GlobeNewswire

Sep 2 Tusker → Fortress SRM Undisclosed Tusker acquires Cleveland-based Fortress SRM, adding ~50 cybersecurity professionals, a 24/7 Security Operations Center and capabilities spanning security consulting, virtual CISO, managed security, incident response and digital forensics; Tusker's fifth acquisition since 2017 and first since consolidating its portfolio companies under one brand. Catch-up: missed by prior sweeps' 72h look-back window. · PR Newswire

Sep 2 Pistachio → Hugin Cybersecurity AS (Hugin.io) Undisclosed Oslo-based security-awareness-training/human-risk-management vendor Pistachio acquires Hugin's cyber-risk assessment and compliance-posture IP (technology/IP only, no staff transfer) to launch a cybersecurity compliance and posture-management product in 2027. Catch-up: missed by prior sweeps' 72h look-back window. · SiliconANGLE

Sep 1 Palo Alto Networks → Console ~$500M (reported by TechCrunch, unconfirmed by company) Palo Alto Networks acquires two-year-old AI-agent IT-helpdesk automation startup Console (Thrive Capital/DST Global-backed), folding it into Cortex to automate SOC alert triage and routine security-operations tasks; Palo Alto's seventh acquisition of 2026. Catch-up: missed by prior sweeps' 72h look-back window. · PR Newswire · TechCrunch

Sep 1 A-LIGN → Pathfynder Undisclosed Adds offensive/defensive security services (penetration testing, red teaming, incident response) to A-LIGN's audit/certification platform -- catch-up, missed by prior sweeps · A-LIGN · SecurityBrief Australia

August 2026

Aug 27 Socure → Fravity Undisclosed Agentic AI-native fraud/risk/compliance investigation platform, folded into Socure's RiskOS as RiskOS_Agents (starting with watchlist screening and KYB checks); announced alongside a $156M strategic growth investment (led by Summit Partners) valuing Socure at $5.2B; Fravity deployments show 80% lower cost-per-case, 5x faster resolution, 70% fewer false positives · Crunchbase News · BankInfoSecurity

Aug 19 Brinqa → PlexTrac Undisclosed Penetration testing and offensive-security reporting platform; closes the CTEM (Continuous Threat and Exposure Management) loop by adding attacker-perspective validation and proof-of-remediation; makes Brinqa the largest standalone unified exposure management vendor (3,000+ customers, 57 countries, 25%+ of Fortune 500) · https://www.helpnetsecurity.com/2026/08/19/brinqa-plextrac-acqisition/

Aug 19 Munich Re (via HSB) → $575M 75M Cyber insurtech serving US SMEs with integrated cyber insurance and managed detection and response (MDR); Munich Re's largest disclosed primary-cyber-market move; At-Bay overseen by Hartford Steam Boiler (HSB), Munich Re's Global Specialty Insurance unit; closing expected Q1 2027; strengthens Munich Re's position combining insurance underwriting with proactive risk mitigation technology · Munich Re PR · Insurance Journal

Aug 19 Cribl → Radiant Security (AI SOC assets) Undisclosed Acquires Radiant Security's AI SOC product IP (autonomous alert triage, investigation, resolution), to be adapted as an application on Cribl's telemetry platform; Cribl's second security acquisition of 2026 after CardinalOps (Jul); more platform additions expected at CriblCon Sep 28 · Cribl · Security Boulevard

Aug 17 Fortinet → Virtue AI Undisclosed AI runtime protection specialist with automated testing, real-time protection, and compliance oversight for AI models, conversational applications, and autonomous agents; integrated into Fortinet's Security for AI strategy and FortiGate platform; Gartner projects AI-security market to grow from .8B to 6.4B by 2030 · Fortinet PR · SecurityWeek · Help Net Security

Aug 14 Datavault AI (NASDAQ: DVLT) → CyberCatch Holdings (TSXV: CYBE) $94.5M all-cash AI-enabled continuous compliance and cyber-risk mitigation platform (NIST CSF 2.0, CMMC 2.0, ISO 27001, HIPAA, PCI DSS); patented agentic AI for continuous control assessment and pen testing; Datavault deploys CyberCatch as compliance layer across DataValue/DataScore/IDE product suite · https://ir.datavaultsite.com/news-events/press-releases/detail/487/datavault-ai-will-acquire-cybercatch-in-an-all-cash-transaction

Aug 12 Undisclosed → A Security $37M Series B Autonomous offensive security testing platform; AI-driven red-teaming. · https://www.securityweek.com/category/cybersecurity-funding-news/ma/

Aug 12 Undisclosed → Tenet Security $6M seed Early-stage cyber startup; seed funding round August 2026. · https://www.securityweek.com/category/cybersecurity-funding-news/ma/

Aug 7 AXA XL → S-RM Undisclosed Full acquisition of remaining shares in S-RM, a global corporate intelligence and cybersecurity consultancy (incident response, threat intelligence, integrity due diligence) operating in 140 countries; AXA XL integrates S-RM into its new AXA XL Risk Advisory unit, extending its prevention-focused offering beyond insurance underwriting into consultancy; transaction expected to close by end-September 2026 · AXA XL PR · Insurance Journal

Aug 4 Crescent Cove Advisors, Greylock, Menlo Ventures → Obsidian Security 5M Series D (.1B valuation) Non-human identity and AI-agent security for SaaS/cloud; 60 Fortune 500 customers; unicorn milestone · https://pulse2.com/obsidian-security-raises-85-million-series-d-at-1-1-billion-valuation/

Aug 4 CrowdStrike Falcon Fund → Above Security Undisclosed (strategic investment) AI-native managed insider threat platform; integrates with Falcon Next-Gen SIEM telemetry for insider risk investigations · https://www.msspalert.com/brief/crowdstrike-invests-in-above-security-adds-insider-risk-investigations-to-falcon

Aug 4 Norwest Venture Partners, SoftBank Vision Fund 2, Hitachi Ventures, LG Technology Ventures, Qumra Capital, Vertex Ventures, Third Point Ventures, DTCP, Intel Capital → Zenity $125M Series C ($180M total raised) AI agent security governance platform (Tel Aviv, 2021) — governs agent intent, allows/blocks autonomous actions; targets the 1-billion AI-agent deployment wave; largest AI-agent-security raise of H2 2026 · https://zenity.io/company-overview/newsroom/company-news/zenity-raises-125-million-to-secure-the-era-of-1-billion-ai-agents/

Aug 4 Ballistic Ventures, Canon Capital, Greenfield Partners, Lightspeed, Red Dot Capital, TLV Partners → Oligo Security $60M Series C ($140M total raised) Runtime application security covering code, cloud workloads, and AI systems; addresses AI-accelerated exploit development · https://www.securityweek.com/oligo-raises-60-million-for-runtime-security/

Aug 3 Visa → BioCatch $2.4B Behavioral biometrics AI platform protecting 1.8B devices and 760M users across 350+ banking clients in 21 countries; fills AI-powered fraud detection gap as account takeovers and scams cost economy $1T+ annually; deal closes Q2 FY2027 pending regulatory approval · https://investor.visa.com/news/news-details/2026/Visa-to-Acquire-BioCatch/default.aspx

Aug 3 Bank of America → MDSec Consulting Limited Undisclosed Acquires UK red-team/pen-testing consultancy (~65 staff, Macclesfield) to internalise offensive security expertise alongside existing Chester cyber ops center · https://www.finextra.com/newsarticle/48179/bofa-to-buy-uk-cybersecurity-firm-mdsec-consulting

Aug 3 Deel → Clarity ~5-50M Deepfake detection and AI identity verification embedded into Deel HR/payroll platform; combats projected 1-in-4 fraudulent candidate profiles by 2028 · https://www.deel.com/blog/deel-acquires-clarity/

Aug 1 SYN Ventures, DataTribe, TEDCO (lead: SYN Ventures) → Balance Theory $19M Series A AI-driven CISO investment management platform; helps enterprises evaluate and optimise security spending across $1B+ portfolios; addresses portfolio visibility gap for large-enterprise security teams · https://www.securityweek.com/balance-theory-raises-19-million-to-help-enterprises-manage-cybersecurity-investments/

July 2026

Jul 31 Cycurion (NASDAQ: CYCU) → Unnamed DC-based federal cybersecurity firm Undisclosed Federal cybersecurity services; acquisition announced alongside record contracted backlog exceeding $150M; expands Cycurion's footprint in US government/defense cyber services · https://www.stocktitan.net/news/CYCU/cycurion-nasdaq-cycu-announces-definitive-agreement-to-acquire-y1exn1qhhm08.html

Jul 30 Institutional investors → ThreatLocker $190M Series D Zero Trust endpoint security platform; round framed around AI threat protection and endpoint isolation for enterprise and MSP markets; Florida-based, ~3.5M protected endpoints · https://fintech.global/2026/07/30/threatlocker-lands-190m-as-ai-threats-reshape-security/

Jul 30 Okta → Permiso Security ~$200M Identity threat detection startup (co-founded by ex-FireEye executives Paul Nguyen and Jason Martin); behavioral analytics across human, non-human, and AI agent identities; fills non-human identity (NHI) and AI agent security gap in Okta's portfolio; deal expected to close Q3 FY2027 · https://www.securityweek.com/okta-to-acquire-identity-threat-detection-firm-permiso/

Jul 29 Bessemer Venture Partners, Cyberstarts, TCV → Onyx Security 13M Series B (40M valuation) AI-agent control plane keeping humans in authority over autonomous enterprise AI agents; Unit 8200 founders · https://www.timesofisrael.com/israeli-cyber-startup-raises-113m-to-secure-and-control-autonomous-ai-agents/

Jul 28 Cyera → Oasis Security ~$1B (LOI) Non-human identity (NHI) and AI agent security startup (machine identity governance, service accounts, API keys, AI agent permissions); deal creates a combined data security + NHI platform at a time when AI agent proliferation is outpacing identity controls; Cyera recently raised $600M at $12B valuation; cash-majority deal · https://techcrunch.com/2026/07/28/cyera-agrees-to-acquire-oasis-security-for-1b-to-safeguard-proliferating-ai-agents/

Jul 28 Team8, Bessemer Venture Partners, Hetz Ventures, Claltech, Notable Capital, Startpoint Capital, SVCI (investors) → Act Security $60M Seed + Series A AI agent control and cloud security platform; stealth launch July 28; headquartered Tel Aviv; addresses AI agent permission management and control-plane visibility for enterprises deploying agentic AI workloads · https://www.chinatechnews.com/2026/07/29/126373-venture-capital-startup-funding-roundup-july-28-2026-battery-ventures-bessemer-gradient-team8-y-combinator-more

Jul 28 Team8, Battery Ventures, YL Ventures (investors) → Hush Security $30M Series A Machine access governance platform for enterprise AI agents and their infrastructure; Akamai Technologies joining as strategic investor; addresses control-plane gap as enterprises deploy AI agents at scale; founded 2024, less than one year from stealth to Series A · https://www.securityweek.com/hush-security-raises-30-million-for-ai-agent-governance/

Jul 28 Canaan Partners, Insight Partners, Team8, M12 (Microsoft Venture Fund) → Mate Security $35M Series A AI-native agentic security operations platform; brings total funding past $50M (eight months post-stealth); 500%+ revenue growth since Q3 2025; enterprise SOC automation targeting AI-speed threats; Black Hat USA 2026 exhibitor (Booth 4717, Aug 3-6) · https://pulse2.com/mate-security-raises-35-million-series-a-to-scale-agentic-security-operations-platform/

Jul 28 Katalyst (e4n) → Layer27 Undisclosed Katalyst, e4n's first US MSP platform, tucks in Durham NC-based MSP/cybersecurity provider Layer27 (Microsoft-focus, healthcare/regulated clients) · ChannelE2E · citybiz

Jul 27 United Ventures (investor) → Beelzebub €3.3M seed AI-native deception platform (LLM-powered honeypots for servers, databases, APIs, cloud, IoT); NIS2 compliance tooling; targeting European enterprises · https://tech.eu/2026/07/27/beelzebub-raises-eur3m-to-strengthen-enterprise-cyber-defence-with-ai/

Jul 27 Keyfactor → Cofide Undisclosed Extends PKI-based verified identity to AI agents and cloud workloads; fills machine/agent identity gap for agentic AI deployments · https://www.keyfactor.com/press-releases/keyfactor-announces-intent-to-acquire-cofide-to-bring-verified-identity-to-ai-agents-and-cloud-workloads/

Jul 27 Bridgepoint → Lansweeper $920M (majority stake, 8.0x revenue multiple) PE buyout building 'the global leader in Technology Asset Intelligence powering enterprise cybersecurity' -- Ghent, Belgium-based cyber-asset/attack-surface intelligence platform; Insight Partners and Imker Group exit. Catch-up record: entirely absent from the tracker, found via this run's mandatory PE-newsroom sweep family. · Bridgepoint · Lansweeper

Jul 23 Battery Ventures, Accel, Foundation Capital → AegisAI $36M Series A ($49M total raised) AI-native email security countering AI spear-phishing surge (reported 5x increase); targets corporate inboxes with proprietary LLMs · https://www.prnewswire.com/news-releases/aegisai-raises-36-million-series-a-led-by-battery-ventures-to-fight-the-new-wave-of-ai-spear-phishing-302833624.html

Jul 23 Cheyenne Ventures, AVP (co-leads), Olive Hill Ventures → Abstract Security $25M Series A extension ($50M total raised) Composable streaming-first SIEM platform; 380% ARR YoY, 264% NRR — positioned as enterprise replacement for monolithic SIEM vendors · https://www.prnewswire.com/news-releases/abstract-raises-25-million-as-enterprises-shift-to-composable-security-operations-302832945.html

Jul 22 Andreessen Horowitz, Sequoia (investors) → Cathedral $160M Series A ($1.4B valuation) AI-native offensive and defensive cyber tooling for DoD and IC; founded by ex-DOGE alumni; targets defense-sector demand wave from Iran and Russia conflicts · https://www.usnews.com/news/top-news/articles/2026-07-22/exclusive-doge-alumni-launch-military-cyber-startup-with-1-4-billion-valuation

Jul 22 Sequoia, Cyberstarts, Greenoaks, Redpoint (investors) → Glow $180M Series A ($1.2B valuation) AI-native endpoint security purpose-built for agentic workloads and AI agents; founded by ex-Meta/Snowflake/Claroty team; targets coverage gap in traditional EDR for AI environments · https://www.globenewswire.com/news-release/2026/07/22/3331154/0/en/glow-emerges-from-stealth-with-180-million-to-reinvent-endpoint-security-in-the-ai-era.html

Jul 22 Cisco Investments (strategic) → Zafran Security Strategic investment (>$140M total raised) Threat exposure management platform; classifies 99% of critical CVEs as unexploitable in a given environment and focuses remediation on the 1% that matter; addresses CVE triage bottleneck · https://www.newswire.com/news/zafran-announces-strategic-investment-from-cisco-investments

Jul 21 Palo Alto Networks → Embrace Undisclosed Leading provider of user-focused observability; adds high-fidelity Real User Monitoring (RUM) and Digital Experience Monitoring (DEM/ADEM) capabilities to Palo Alto Networks Observability platform; also launching Synthetics for proactive application performance validation; Observability platform surpassed $300M ARR in Q3 FY26; expected close Q1 FY27 · Palo Alto IR · GuruFocus · StreetInsider

Jul 21 Series A investors (Brightmind Partners led) → Empirical Security 5M Series A (7M total raised) AI-driven CVE exploit-prediction platform; Foundation monitors 18k+ CVEs for exploit likelihood; Radiant provides org-specific threat identification; founded 2024 by Kenna Security / EPSS alumni · https://www.securityweek.com/empirical-security-raises-25-million-in-series-a-funding/

Jul 20 A16Z, Bessemer, Craft, Merlin (investors) → Neo $100M (seed + Series A combined) Agentic software control for enterprise AI: SecOps inventory, posture, attribution, and policy enforcement across AI agents, AI-enabled apps, agentic browsers, NHI identities, and traditional software; built by ex-SentinelOne/Wiz/Palo Alto veterans; addresses coverage gap as enterprises adopt agentic tools at speed · https://www.securityweek.com/neo-emerges-from-stealth-with-100m-to-control-and-secure-enterprise-ai-software/ · https://www.globenewswire.com/news-release/2026/07/20/3329638/0/en/neo-launches-with-100m-to-secure-ai-software-across-the-enterprise.html

Jul 17 Axiom Equity, Mercia (investors) → Risk Ledger $32M Series B Network-first third-party risk management platform mapping supplier risk at depth; US expansion; addresses supply-chain cyber gap in enterprise vendor risk programmes · https://www.securityweek.com/risk-ledger-raises-32-million-in-series-b-funding/

Jul 16 Signicat → Inverid Undisclosed Dutch NFC-based digital identity verification company behind ReadID, used by 50+ organisations including Rabobank, ING, Entrust and government entities in UK and Denmark; deal strengthens Signicat's EU digital identity platform ahead of EUDI Wallet rollout; Inverid tripled revenue under Main Capital ownership; founders reinvesting proceeds into Signicat · https://www.signicat.com/press-releases/signicat-acquires-inverid

Jul 16 CrowdStrike → XM Cyber (IP acquisition from Schwarz Digits) Undisclosed (IP-only) 45+ patents and proprietary source code for exposure management and attack-path analysis added to Falcon; Schwarz Digits simultaneously expands sovereign-cloud partnership bringing Falcon to STACKIT cloud for European sovereign deployments · https://ir.crowdstrike.com/news-releases/news-release-details/crowdstrike-and-schwarz-digits-expand-strategic-partnership · https://www.calcalistech.com/ctechnews/article/rkx9rod4zl

Jul 16 NINJIO → SafeStack Undisclosed Developer-focused secure coding and AppSec training platform; NINJIO had been reselling SafeStack's Secure Code product, making this a vertical integration acqui-hire that embeds secure-code training natively into NINJIO's human-risk management platform (Gauge Capital portfolio) · https://www.prnewswire.com/news-releases/ninjio-acquires-safestack-to-expand-human-risk-management-platform-with-secure-code-training-302827087.html

Jul 15 Accel, Greylock, CRV, Hetz, AlphaDrive (investors) → Oak $60M seed AI-native Identity Operating System replacing fragmented legacy IGA/IAM stack with a single continuous control plane governing all human, machine, and AI agent identities; founded Dec 2025 by ex-SentinelOne (CEO Shai Morag); already GA and deployed across enterprise customers · https://www.securityweek.com/oak-emerges-from-stealth-mode-with-60-million-in-funding/ · https://techcrunch.com/2026/07/15/backed-by-60m-in-funding-oak-steps-out-of-stealth-to-fix-the-identity-mess-that-ai-agents-are-making-worse/

Jul 15 Foundation Capital, Zetta Venture Partners (investors) → Pulse Security $8M seed AI-powered CISO operational management platform: program visibility, business-risk communication, board reporting · https://www.globenewswire.com/news-release/2026/07/15/3327850/0/en/Pulse-Security-Debuts-Operational-Management-Platform-Built-for-Security-Leaders.html

Jul 14 Cribl → CardinalOps ~$100M est. AI-native detection-engineering platform; automates SIEM rule translation and coverage-gap analysis; new Tel Aviv R&D hub; extends Cribl AI platform into full AI-SOC offering · https://www.globenewswire.com/news-release/2026/07/14/3327113/0/en/cribl-acquires-cardinalops-to-further-expand-its-ai-platform-into-security-operations.html

Jul 13 NEA, Lightbank, XTX, Sequoia (investors) → Valarian $50M Series A Sovereign and air-gapped AI compute infrastructure for defense and regulated sectors; first NEA bet on a European defense-tech startup · https://www.securityweek.com/valarian-raises-50-million-for-sovereign-infrastructure-control-layer/

Jul 9 Bessemer Venture Partners, Merlin Ventures, Evolution Equity Partners, Singtel Innov8 (investors) → QIZ Security $17M seed Post-quantum cryptography orchestration: inventories cryptographic assets, manages migration to PQC-compliant algorithms; ecosystem with Cisco, AWS, Google, CrowdStrike · https://www.securityweek.com/qiz-security-raises-17-million-for-cryptographic-governance-platform/

Jul 7 Barracuda Networks → Evo Security Undisclosed PAM/IAM specialist for MSPs — multi-factor authentication, privileged access management, and identity controls integrated into the BarracudaONE platform; positions Barracuda as a single-vendor security stack for MSP customers with native identity governance alongside its existing email, network, and application security · Barracuda PR · Help Net Security · SiliconANGLE

Jul 3 Zurich Insurance Group → BOXX Insurance Undisclosed Toronto-based global cyber insurtech (retail + SME cyber insurance across 5 continents; prior Zurich partnership since 2021); BOXX continues operating as a standalone entity integrated into Zurich Global Ventures (ZGV); accelerates Zurich's cyber coverage and protection services for retail and SME customers globally; BOXX's all-in-one cyber insurance + security services model extends Zurich's position in the SME cyber market that large commercial insurers have historically underserved · BOXX PR · Reinsurance News · InsurTech Digital · Insurance Business

Jul 3 Viatel Technology Group → FullProxy Undisclosed Glasgow-based cybersecurity consultancy; Viatel expands its UK & Ireland security portfolio with a specialist firm serving healthcare, public sector, education, and CNI verticals; FullProxy brings penetration testing, managed security services, and security consulting capabilities · digit.fyi · Viatel PR · SiliconRepublic

Jul 1 LevelBlue → Trustwave Undisclosed MSSP consolidation forming world's largest pure-play managed security services provider; Trustwave brings SpiderLabs (threat research, intelligence, threat hunting), MDR, offensive security, strategic advisory, incident response, and security software; combined entity also includes Stroz Friedberg and Elysium Digital; LevelBlue is the AT&T Cybersecurity spinoff (Dallas TX); deal positions LevelBlue to serve SMB through large enterprise and public sector · LevelBlue PR · MSSP Alert · SecurityBrief · GovConWire

Jul 1 Qualcomm → SAM Seamless Network (Securing Sam Ltd.) >$150M Israeli IoT/connected-device security startup protecting 500M+ devices across 15M+ ISP/telco networks; customers include AT&T, Verizon, Bezeq (Israel), Telenet (Belgium), Virgin Media (UK); SAM's on-device security layer protects home/enterprise IoT environments at network edge without routing traffic through the cloud; fits Qualcomm's edge-AI strategy — thickening on-device protection reduces cloud compute dependency and extends Snapdragon platform value into CNI and enterprise IoT security · CTech/Calcalist · Globes · MarketScreener · Telecompaper

June 2026

Jun 30 Aikido Security → Root ~$70M Belgian open-source AppSec unicorn ($1B valuation) acquires Israeli startup Root.io; Root deploys AI agents to generate and ship backported patches for vulnerable open-source library versions in 15–40 minutes — without forcing major version upgrades that break APIs; integrates into Aikido's platform as "Aikido Libraries," extending Aikido's ASPM from scanning into autonomous remediation for software supply-chain vulnerabilities · Help Net Security · Aikido Blog · CTech · GlobeNewswire

Jun 29 Intrusion Inc. → VigilAigent (from Tego Cyber) Undisclosed AI-native MSSP acquisition (~$3.5M ARR, 80+ reseller partners); combines VigilAigent's "The Oracle" agentic AI threat-detection engine with Intrusion's TraceCop platform; positions Intrusion as an AI-native managed security provider for SMB and mid-market · PR Inside/GlobeNewswire · StockTitan · SEC Form 8-K

Jun 29 CyberFOX → Timus Networks Undisclosed Tampa FL-based SASE + IAM startup for MSPs; adds secure web browsing, zero-trust network access, and adaptive access-policy enforcement to CyberFOX's single-vendor MSP security stack; both companies are Tampa-based and MSP-focused, creating an integrated SASE + endpoint + identity bundle · ChannelPro Network

Jun 26 Cyera → Otterize Undisclosed (~tens of millions) Cloud-native non-human identity (NHI) security startup (founded 2022; eBPF-based runtime agent that discovers and controls sensitive data flows in microservices and cloud-native workloads); Cyera's sixth acquisition, bolstering its DSPM and AI-governance stack with real-time data-lineage and workload-identity controls; Otterize backed by Index Ventures (raised $11.5M seed); co-founders are IDF 8200 alumni + former CTO of MuleSoft · Cyera PR · CTech

Jun 22 Booz Allen Hamilton → Ultra I&C Mission Solutions (from Cobham Ultra / Advent International) $720M Mission-critical software, encryption, and edge-compute products for US and allied defence and intelligence agencies; cryptographic and signals-processing products for classified programs; Cobham Ultra retains its radar, sonar, and countermeasures divisions; close Q2 FY2027 (targeting September 2026); double-digit revenue growth and >20% EBITDA margins projected per Booz Allen guidance; a sovereign capability play distinct from the NHI/SaaS consolidation wave · Booz Allen PR · BusinessWire · WashingtonExec · SEC 8-K

Jun 22 Cisco → WideField Security Undisclosed Identity-lifecycle security to extend Splunk's Agentic SOC (identity, credentials, sessions, blast radius) · SecurityWeek

Jun 22 F5 → SurePath AI Undisclosed Denver-based shadow AI detection and discovery startup (~19 employees, ~$6M raised); powers F5's AI Security Platform with network-based AI discovery identifying AI usage across the enterprise including shadow AI without requiring direct application integrations; 88% of organisations report AI-related security challenges per F5's 2026 State of Application Strategy Report; extends F5's application delivery portfolio into the AI governance and shadow-AI security layer · F5 PR · Help Net Security · GeekWire

Jun 18 Accenture → Dragos (majority) + runZero + NetRise ~$4.17B (Dragos valued $3.25B) Move from OT services into OT security software; Dragos stays standalone, runZero (asset discovery/exposure) + NetRise (firmware/supply-chain) fold under it. ~$208M ARR, +53% YoY. Close Aug–Sep 2026 · SecurityWeek · Industrial Cyber

Jun 18 Group 11, Bicycle Capital, Bain Capital Ventures (+ others) → Dream (funding round — Series C) $260M ($3B valuation) Sovereign AI and national cyber defense platform for governments; three products: Sphere (CNI/nation-state threat defense), Hero (AI-powered autonomous vulnerability hunting), Atlas (national data/intelligence integration); $130M+ ARR; serving 6 governments; co-founded by Shalev Hulio (former CEO, NSO Group), Sebastian Kurz (former Austrian PM), and Gil Dolev; HQ Tel Aviv with offices in Vienna and Abu Dhabi; positioned as sovereign alternative to US/Chinese hyperscaler AI dependency · SecurityWeek · PR Newswire · Times of Israel

Jun 16 Databricks → Panther Undisclosed AI SOC / agentic detection platform; Panther built a security lakehouse-native SIEM enabling real-time threat detection at Databricks scale; integrates with Lakewatch (Databricks' agentic SIEM, launched Mar 2026 via Antimatter+SiftD.ai acquisitions); positions Databricks as a full-stack security analytics vendor — from data ingestion to detection engineering to AI-agent investigation; extends the "security lakehouse" model to disrupt legacy SIEM · Databricks PR · Infosecurity Magazine

Jun 16 Francisco Partners → EfficientIP Undisclosed (buyout from existing shareholders incl. founders, TempoCap, Jolt Capital; management reinvests) PE buyout of the Paris-based DDI (DNS/DHCP/IPAM) and DNS-security vendor (~1,500 customers, ~220 staff) to build out Francisco Partners' infrastructure-security portfolio; CEO Norman Girard continues. · BusinessWire · Paul Hastings

Jun 15 SailPoint → Entro Security ~$200M est. Israeli NHI / AI-agent identity security startup (Tel Aviv; $24M raised seed+Series A; covers 1,000+ NHI/agent types, 1,200+ credential types across 70+ enterprise sources; proprietary NHIDR — non-human identity detection and response for behavioral anomaly monitoring of AI agents and machine identities in real time); integrates into SailPoint Agentic Fabric to expand coverage across the full identity ecosystem from human to non-human to AI agent; closed June 29, 2026 — one of the fastest close timelines of the year · SailPoint PR · GlobeNewswire close · SiliconANGLE · SC Media

Jun 15 1Password → Apono $250M–$300M (est.) Israeli just-in-time privileged access management startup (80 staff, ~50 in Israel); dynamically grants and auto-revokes temporary narrowly scoped permissions for humans, machines, and AI agents at the moment of need — eliminates standing accounts and persistent privileges; positions 1Password as the "control plane" for access governance in the agentic workforce, extending from credential management into behavioral-access monitoring; 1Password PR states "over $200M," Calcalist reports $250M–$300M · 1Password PR · SecurityWeek · CTech

Jun 15 A10 Networks → TrojAI Undisclosed (A10 says not material to fiscal 2026 results) A10 acquires the Canadian AI-security startup (AI red-teaming, runtime protection, governance for AI apps/agentic workflows) to expand its AI security roadmap across deployment models. · A10 Networks · BusinessWire

Jun 9 Rubrik → Strata (Strata Identity) Undisclosed Rubrik buys the identity-orchestration vendor to power a new 'Identity Continuity' capability (automatic failover to a secondary identity provider when the primary IdP is compromised/down), alongside an in-house 'Identity Roll Forward' AD-recovery feature; part of Rubrik's identity-resilience push. Announced at Rubrik FORWARD, Las Vegas. · Rubrik Newsroom · BusinessWire

Jun 9 Axiom GRC → MHM Undisclosed (one secondary tracker cites an unconfirmed ~$250M figure, not corroborated by primary sources) Inflexion-backed Axiom GRC's first move into Canada, acquiring the Calgary-based cyber-audit/assurance firm (SOC 1, SOC 2, ISO 27001, ISO 42001 -- first Canadian org accredited for ISO 42001 AI-governance assurance); Axiom's 7th deal since Inflexion backing, following IS Partners (2025) and AssurancePoint (Jan 2026). · GRC Report · IS Partners

Jun 1 Dragos → Phosphorus Undisclosed xIoT/xOT security specialist (Nashville; ~$65M total funding, $38M round 2022); adds asset discovery, vulnerability management, and threat detection for billions of connected devices embedded in critical infrastructure (IIoT, medical IoT, smart-building, building automation); extends Dragos Platform's TAM to $50B+ · Dragos PR · BusinessWire · SecurityWeek

May 2026

SecurityWeek: 26 deals announced in May 2026.

May 27 Snowflake → Natoma Undisclosed Enterprise Model Context Protocol (MCP) gateway governing what AI agents can access across enterprise apps with tool-call-level audit logging, folding into Snowflake Intelligence/Cortex Agents/Cortex Code as part of an agentic control-plane strategy. · Business Wire

May 26 Paessler AG → UVnetworks Undisclosed German IT/OT monitoring vendor (PRTG Network Monitor) acquires UVnetworks (maker of UVexplorer/UVexplorer Server — automated network topology discovery, inventory, and configuration backup); UVexplorer integrates as a native PRTG plugin, closing the gap between monitoring and network-context visibility for incident response; extends Paessler's TAM into network operations and OT security monitoring beyond its traditional IT heartbeat/SNMP roots · PR Newswire · ChannelE2E · Paessler PR

May 24 Cyera → Genie Security ~$50M Six-month-old Israeli endpoint data-loss prevention startup; prevents sensitive data leaks from generative AI tools in real time; extends Cyera's DSPM ecosystem to the endpoint; Cyera's fifth acquisition, valued at $9B ($400M Series F) · CTech · Times of Israel · SecurityWeek

May 22 Cycurion → Secuvant $2.875M Automated SOC-as-a-Service with AI-driven threat detection and response; complements HavenX platform ($875K cash + 888,888 preferred shares; close within 7–10 days) · GlobeNewswire · SecurityWeek

May 21 Zscaler → Symmetry Systems Undisclosed Identity-mapping and data-access security for AI agents; Symmetry's "Access Graph" maps every human and non-human identity interaction across an enterprise, integrating with Zscaler Zero Trust Exchange to govern AI agent-to-agent communication at scale; fills a critical visibility gap as AI agents multiply service-account proliferation · Zscaler PR · Nasdaq/IR · StockTitan/8-K

May 21 Cranium AI → Aiceberg Undisclosed Merges Cranium's AI security/governance framework with Aiceberg's agentic-AI risk-mapping tech into one end-to-end AI-lifecycle security platform; Aiceberg CEO Alex Schlager becomes Cranium's CTO. · Pulse.bot

May 19 Check Point → Deepchecks ~$15M Israeli AI evaluation startup — team + IP acqui-hire; LLM evaluation and continuous monitoring integrated into Check Point's Agentic Network Security Orchestration platform; Check Point's fourth Israeli acquisition in 2026 (after Cyclops, Cyata, Rotate) · CTech · Security Boulevard · BankInfoSecurity

May 19 Eurazeo → Nextron Systems Undisclosed (majority stake) Eurazeo's Elevate fund takes a majority stake in Frankfurt-founded APT-detection/forensic-analysis and compromise-assessment vendor Nextron Systems (550+ clients, 25+ countries) on rising European demand for compromise-assessment tooling in regulated sectors. Catch-up record found via this run's PE-newsroom sweep family. · Eurazeo · Nextron Systems

May 18 Torq → Jit ~$70M est. AI context-graph firm; adds org-specific context to Torq's AI SOC platform for agentic investigations; ~30-person team joins Torq; deal not officially disclosed but estimated at ~$70M across multiple Israeli tech sources · CTech · BusinessWire · BankInfoSecurity

May 14 Akamai → LayerX $205M Browser-based AI usage control / secure enterprise browser; workforce-security strategy. Closed July 2, 2026. · SecurityWeek · Help Net · GlobeNewswire close

May 14 SecurityScorecard → Driftnet Undisclosed Internet-scanning / next-gen threat intel engine into the TITAN AI platform for third-party-risk · SecurityScorecard · SiliconANGLE

May 12 AYCE Capital → Kernel Advisory Undisclosed MSP-platform roll-up AYCE Capital acquires Kernel Advisory, a cybersecurity advisory firm serving PE funds' cyber M&A due diligence plus vCISO/managed-security/IR work, anchoring a cybersecurity center of excellence across AYCE's North American, UK and European MSP portfolio. · GlobeNewswire · Dealroom

May 7 Cycurion → Halo Privacy + HavenX Undisclosed Secure communications + forensic attribution; government-grade privacy and active-defense stack atop Cycurion's existing cybersecurity services; close targeted end of June 2026 (NASDAQ: CYCU) · GlobeNewswire · SecurityWeek

May 6 WatchGuard → Perimeters.io Undisclosed Cloud Application Security SaaS for MSPs (founded 2022; ~30 staff, Wilmington DE; scans SaaS environments for misconfigurations across 40+ apps including M365, Salesforce, and OpenAI); simultaneous launch of WatchGuard CloudDR (Cloud Detection and Response) — continuous visibility, detection, and automated response for MSP multi-tenant cloud environments · WatchGuard PR · GlobeNewswire · BankInfoSecurity

May 6 Boost Security → SecureIQx + Korbit.ai Undisclosed Adds SecureIQx's multi-language reachability/SCA analysis and Korbit.ai's AI-driven pull-request security review to Boost's AI-native SDLC Defense Platform; bundled with a separate $4M funding raise. · SiliconANGLE

May 4 Cisco → Astrix Security ~$400M Israeli NHI (non-human identity) security startup — API keys, service accounts, OAuth tokens, AI agent credentials; integrates into Cisco's identity security layer for the agentic workforce; Cisco's largest Israeli acquisition since 2024 · Cisco Blogs · SecurityWeek · CTech

May 1 Datavault AI (NASDAQ: DVLT) → CyberCatch (TSXV: CYBE) ~CAD $136.8M (~USD $100M) all-stock AI-enabled cyber risk mitigation and quantum-resistant security integration; CyberCatch's SaaS platform proactively discovers and remediates cyber risks in real time; acqui-hire + tech play to embed PQC into Datavault's SanQtum-secured edge ecosystem; CyberCatch valued at ~CAD $5.11/share (2.2× market premium); CyberCatch operates as Datavault subsidiary with founder Sai Huda as president · FinanceWire · Seeking Alpha · AccessNewswire

April 2026

Apr 30 Everfield Germany → Rhebo (sold by Landis+Gyr) High single-digit M USD OT/IIoT network anomaly-detection software (Leipzig, est. 2014; part of Landis+Gyr since 2021); Everfield expands its OT software vertical in DACH markets (existing: ondeso OT management); Landis+Gyr exits to refocus on core energy-metering business · Landis+Gyr PR · Industrial Cyber

Apr 30 Palo Alto Networks → Portkey $120–140M est. AI Gateway startup — centralised control plane to manage, route, and secure AI agent-to-agent and app-to-model traffic (processes trillions of tokens/month); integrates into Prisma AIRS to govern agentic AI at low-latency scale; close expected fiscal Q4 2026 · Palo Alto Networks PR · GuruFocus · Pulse2 · CTech

Apr 28 Silverfort → Fabrix Security Undisclosed (est. tens of millions) Israeli AI-native identity security startup (Tel Aviv); adds autonomous runtime identity protection — monitors and secures identity behaviors in real time, detecting anomalous service-account, machine-identity, and AI-agent activity across hybrid and multi-cloud environments; extends Silverfort's unified identity protection platform with AI-driven detection and response for the agentic workforce era · PR Newswire

Apr 28 Socket → Secure Annex Undisclosed Browser and editor extension security startup (John Tuckner, founder); extends Socket's open-source supply-chain security platform beyond npm/PyPI packages into browser extensions (Chrome/Edge), VS Code extensions, MCP servers, and AI skills — closing a high-risk visibility gap where attackers embed malicious code in developer tooling; customers include Reddit, Brave, Torq, and Movable Ink; Socket now protects 14,000+ orgs and 1.2M code repositories · Socket Blog · BankInfoSecurity · EINPresswire

Apr 28 Spin.AI → Revyz Undisclosed Atlassian Jira/Confluence backup and SSPM specialist (Atlassian Gold Marketplace Partner); extends Spin.AI's data resiliency and security posture management platform to the Atlassian ecosystem alongside Google Workspace, Microsoft 365, and Salesforce; combined platform covers automated backup, configuration drift detection, sandbox-to-production workflows, ransomware protection, eDiscovery, DLP, and SSPM across six SaaS platforms · Spin.AI PR · Newsfile · Seeking Alpha

Apr 27 Integris → First Focus Undisclosed Cranbury, NJ-based MSP Integris makes its first international acquisition, buying First Focus (~400 staff, 800+ clients across Australia, New Zealand and the Philippines, offering managed IT, cybersecurity and AI services); combined group becomes a ~1,200-employee SMB-focused MSP. April 2026 M&A-backfill enrichment. · PR Newswire

Apr 27 Bridgepoint → iC Consult Group Undisclosed (media estimate €400-450M) Carlyle fully exits its stake in iC Consult, the world's largest independent IAM/identity-security consulting and managed-services provider; founder-CEO and management roll over. Catch-up record: entirely absent from the tracker, found via this run's PE-newsroom sweep family. · Bridgepoint · Carlyle

Apr 23 Cyera → Ryft Undisclosed (~$100–130M est.) AI-agent data lake security (est. 2024, backed by Index Ventures / Bessemer; open-standard data lake with automated governance, compliance, DR); builds unified control plane for AI agent data access; Cyera's fourth acquisition, valued at $9B post $400M Series F · Cyera PR · SiliconANGLE

Apr 21 TekStream → ImagineX (cybersecurity division) Undisclosed Atlanta-based digital transformation firm acquires ImagineX's cybersecurity practice (Cyber Strategy & Advisory, vCISO, GRC, CTEM, IAM); positions TekStream as an end-to-end digital resilience provider from board-level strategy through SOC operations · PR Newswire · BankInfoSecurity

Apr 21 Airbus → Quarkslab Undisclosed French cybersecurity firm (~100 staff, Paris/Rennes; QShield protects software against AI-driven reverse engineering and adversarial threats); adds sovereign EU cyber R&D to Airbus Defence and Space's pan-European portfolio (alongside Infodas/DE, Ultra Cyber/UK); backed by Tikehau Capital since 2020 · Airbus PR · GovInfoSecurity

Apr 21 Airbus Defence and Space → Quarkslab Undisclosed Signs agreement to buy the French (Paris/Rennes, ~100 staff) cybersecurity research firm — reverse-engineering, embedded/IoT security, code protection — to strengthen its standing as a sovereign cyber partner for French authorities; closed Oct 1, 2026 after regulatory approval. · Airbus · ThreatCluster

Apr 11 Fortreum → Kovr.AI Undisclosed FedRAMP-authorized AI-native compliance automation platform; adds AI-driven compliance readiness, audit preparation, and evidence-collection automation to Fortreum's federal cybersecurity and cloud consulting practice; Fortreum specialises in FedRAMP assessments and federal cloud security · BusinessWire

Apr 9 Cisco → Galileo Technologies Undisclosed AI agent observability and evaluation platform; extends Splunk Observability Cloud with agent tracing, quality evaluation, and production AI guardrails; closed May 22, 2026 · NetworkWorld · ChannelE2E · Futurum Group

Apr 8 Virtual IT Group (VITG) → Security Centric Undisclosed Australian IT/managed-services provider VITG acquires Security Centric, an Australian cybersecurity consultancy (MDR, GRC and advisory, security engineering, technical assurance), forming a combined ~45-person cybersecurity practice; Security Centric's CEO becomes VITG's CSO. April 2026 M&A-backfill enrichment. · PR Newswire

Apr 2 Fortra → Zero-Point Security Undisclosed UK red-team training firm (est. 2018; Red Team Ops I & II courses, hands-on adversary emulation and penetration testing); Fortra's 21st acquisition — expands Cobalt Strike / Core Impact / Outflank offensive portfolio with specialized training and purple-team capability · Fortra PR · Security Today

March 2026

Mar 26 Rapid7 → Kenzo Security Undisclosed Agentic AI platform for autonomous SOC investigations and preemptive threat detection; no material ARR/profitability impact per Rapid7 · Rapid7 IR · SecurityWeek

Mar 24 Ekinops → Chimere Undisclosed French universal ZTNA startup (Paris); Chimere's agent-agnostic ZTNA platform securely interconnects all endpoints with all enterprise resources regardless of OS, device type, or location; positions Ekinops as the sole European single-vendor SASE company globally (combining existing Olfeo SWG/May 2025 and new Chimere ZTNA); transaction completed before March 31, 2026 · Ekinops PR · PRNewswire · Morningstar

Mar 24 Databricks → Antimatter + SiftD.ai Undisclosed Powers Lakewatch, Databricks' new open agentic SIEM; Antimatter adds AI-agent authentication/authorization (Berkeley researchers); SiftD.ai adds SPL-originated large-scale detection engineering (Splunk founders) · Databricks PR · TechCrunch · SiliconANGLE

Mar 24 Epiq → LitLingo Undisclosed Legal/eDiscovery services firm acquires Austin-based LitLingo, an AI platform that monitors high-risk employee communications in real time, folding it into Epiq Service Cloud's compliance/investigations/risk-management line -- March 2026 backfill · Epiq · eDiscovery Today

Mar 24 DeleteMe → Block Party Undisclosed Data-broker/personal-data-removal service acquires Block Party (founder Tracy Chou's social-media privacy/deep-clean tool across TikTok, Instagram, Facebook, Venmo, X), combining data-broker removal with social-media exposure management under one consumer privacy product -- March 2026 backfill · TechCrunch · Homebrew

Mar 23 Airbus Defence and Space → Ultra Cyber Ltd Undisclosed UK sovereign cybersecurity firm (200+ staff, Maidenhead cyber centre of excellence); cryptography and data security for UK MoD programs + specialised airborne datalinks capability; joins Airbus' Connected Intelligence business unit alongside prior acquisitions Quarkslab (FR, Apr 2026) and Infodas (DE); closes H2 2026 subject to regulatory approval; seller: Cobham Ultra (Advent International portfolio) · Airbus PR · Advent International · SecurityWeek

Mar 19 AppViewX → Eos Undisclosed AI-native Identity Control Plane for AI agents and autonomous workloads; AppViewX (CLM/PKI automation) acquires Eos (agentic governance + privileged access control for AI agents and machine identities in cloud and hybrid environments); integrates into AppViewX platform to deliver end-to-end machine and AI agent identity security; Eos co-founders become AppViewX CEO + CTO · AppViewX PR/GlobeNewswire · Help Net Security

Mar 19 Infotrust → Catalyst Cyber ~AUD $5M (~$3.5M cash + $1.5M shares, uncapped earn-out) Canberra-based federal-government cyber assurance/advisory/compliance consultancy (~20 staff, founder George Katavic); secures Infotrust (ASX: ITS) immediate access to high-barrier Australian federal cyber security contracts and strengthens its sovereign-provider positioning · Infotrust PR · SecurityBrief · CRN Australia

Mar 19 Sterling Investment Partners → Cyber Advisors Undisclosed Greenwich, CT PE firm acquires Cyber Advisors (Maple Grove, MN; 330+ staff, 1,800+ customers; managed IT/cybersecurity services and consulting) from prior PE owner Goldner Hawn, backing next-stage growth -- March 2026 backfill · Sterling Investment Partners · Pulse2

Mar 11 Leonardo → Becrypt Undisclosed Italian aerospace, defense, and security multinational acquires UK-based data-protection and secure-mobile cybersecurity firm (encryption, secure OS, government-grade device security; founded 1996, ~100 specialists, London); expands Leonardo's cybersecurity footprint into UK sovereign/government markets; deal subject to regulatory approval, expected to close Q2 2026 · https://ukdefencejournal.org.uk/leonardo-to-acquire-uk-cyber-firm-becrypt/ · https://www.becrypt.com/becrypt-joins-forces-with-leonardo-to-expand-global-cyber-security-reach/

Mar 10 Accel, GV, Kleiner Perkins, Menlo Ventures, 8VC, Ballistic Ventures, In-Q-Tel (+ others) → Armadin (funding round — combined seed + Series A) $189.9M Autonomous AI cybersecurity agent startup founded by Kevin Mandia (former Mandiant CEO / Google Cloud cybersecurity chief) in September 2025; Armadin creates AI agents that autonomously scan for threats and conduct red-teaming without human intervention; 60+ employees at launch; working with Fortune 100 companies; combined seed + Series A is reportedly a record for a security startup at that stage; Accel leads, with GV (Google Ventures), Kleiner Perkins, Menlo Ventures, 8VC, Ballistic Ventures (Mandia co-founded), and In-Q-Tel (CIA) participating · SecurityWeek · TechCrunch · CNBC · GovInfoSecurity

Mar 9 OpenAI → Promptfoo Undisclosed (last valued ~$86M, Jul 2025) Agentic AI security testing; integrates into OpenAI's Frontier platform to identify and remediate AI-system vulnerabilities during development · OpenAI · SecurityWeek · TechCrunch

Mar 3 Giesecke+Devrient (G+D) / Veridos → XTec Undisclosed US federal-grade identity, authentication, and access management specialist (FedRAMP High authorized — the only ICAM ecosystem certified at this level; long-standing relationships with 105+ US federal agencies; cryptographic tokens and smart access systems for government and regulated enterprises); integrated into Veridos (G+D's joint venture with Bundesdruckerei, the German federal government ID technology group); closed February 27, 2026, announced March 3; expands G+D's Digital Security Segment and Veridos' federal credentialing footprint · G+D PR · GlobeNewswire · Biometric Update

Mar 2 Quantum eMotion → SKV Technology Inc. Undisclosed Canadian quantum-resistant security firm acquires SKV Technology (Ottawa; hardware security modules and post-quantum cryptography integration); expands Quantum eMotion's quantum-safe product portfolio for financial services and critical infrastructure; closed March 2, 2026 · Quantum eMotion PR · SEC Filing

Mar 2 Zurich Insurance → Beazley $10.9B (~£8.1B) Specialty insurer (cyber, marine, aviation, space, fine art); Beazley is one of the world's largest cyber insurers with Full Spectrum Cyber offering combining coverage + in-house IR + proactive security services; combined ~$15B specialty GWP; close H2 2026 subject to regulatory approval · Zurich PR · Insurance Journal

February 2026

Feb 27 Quantum eMotion → Jet Lab Technologies (SecureKey platform) Up to $15M (royalties over 5 years) QeM acquired Jet Lab's SecureKey cryptographic-software platform to combine it with its QRNG-powered Sentry-Q layer, creating a full-stack quantum-resilient security architecture spanning cloud, network, endpoint, and chip; distinct from QeM's concurrent March acquisition of SKV Technology hardware security modules · GlobeNewswire

Feb 23 Experian → AtData Undisclosed Email identity intelligence specialist (world's most comprehensive email insights technology; 10B+ email addresses globally; 98% coverage of active North American email addresses; real-time signals on validity, deliverability, fraud risk, identity linkage); Experian integrates AtData into its identity and fraud decisioning platforms to close gaps in email-based authentication and fraud prevention; Experian's first acquisition in 16+ years · Experian PR · Finovate · RegTech Analyst

Feb 18 Palo Alto Networks → Koi ~$400M est. Agentic endpoint security startup (secures unvetted browser extensions, AI tools, and developer add-ons that employees install — the "last mile" of the modern attack surface); technology folds into Cortex XDR and Prisma AIRS to govern AI agent-level endpoint risk; closed April 14, 2026 · Palo Alto Networks PR · KuppingerCole · Futurum Group

Feb 17 Booz Allen Hamilton → Defy Security Undisclosed Cyber services and consulting firm; expands Booz Allen's global commercial business into UK/EU financial services, health/life sciences, manufacturing, and energy markets · Booz Allen PR · SecurityWeek

Feb 17 ITC Secure + IronNet (merger) → Collective Defence (new co.) Undisclosed UK-headquartered ITC Secure (30+ years managed security / SOC operations) merged with IronNet's collective-defense network-detection platform to form Collective Defence — a Luxembourg-domiciled critical-infrastructure protection company targeting state-sponsored hybrid-warfare threats; combined entity serves CNI operators across financial services, energy, and government · BusinessWire

Feb 12 Proofpoint → Acuvity Undisclosed AI enterprise security and governance startup (founded 2023, 24 staff, $9M seed Foundation Capital; emerged from stealth Sep 2024); delivers visibility, governance, and runtime protection across the full AI/agent-driven workspace — from browser endpoints and MCP servers to locally installed models; enables Proofpoint to govern shadow AI usage, prevent sensitive data exposure to GenAI services, and defend against prompt injection and model-manipulation attacks; extends the human-centric security platform into the agentic workforce era · Proofpoint PR · Help Net Security · CyberScoop

Feb 12 Check Point → Cyata + Cyclops Security + Rotate ~$150M total (~$85M to Cyclops) Three Israeli startups acquired simultaneously to build an end-to-end AI security platform: Cyata (AI agent identity management — discover active agents, map permissions, monitor behavior, enforce policy; founded 2024); Cyclops (internal asset discovery + continuous threat exposure management — integrates with 150+ systems across SaaS, cloud, on-premises, IoT/OT, endpoints and workloads); Rotate (unified MSP management and scalability for mid-market customers); Check Point's fourth through sixth Israeli acquisitions in 2026 · Check Point PR · CTech · BankInfoSecurity · SC Media

Feb 11 Palo Alto Networks → CyberArk $25B Bring identity security into the core platform; largest pure-play cyber deal of 2026 · Verdict

Feb 11 Cellebrite → SCG Canada, Inc. Undisclosed Drone/UAV digital forensics leader; access to data from 80+ UAV types (flight logs, video, cell tower data, telemetry); extends Cellebrite's AI platform for law enforcement, defense, and intelligence customers; closed March 2, 2026 · Cellebrite PR · Newswire.ca

Feb 11 Endor Labs → Autonomous Plane Undisclosed Cloud-native AppSec startup (founded by Kyle Quest, creator of DockerSlim); adds full-stack reachability from code to container — SCA findings correlated with container image vulnerabilities, runtime profiling to identify genuinely exploitable vulns; eliminates up to 90% of false positives typical of conventional scanners; extends Endor Labs' AI-native application security platform · Endor Labs PR · fintech.global

Feb 10 Sophos → Arco Cyber Undisclosed UK-based cybersecurity assurance company (~30 staff; specialist in controls optimization and governance automation); Sophos integrates Arco's capabilities into its CISO Advantage offering, delivering AI-powered cybersecurity governance to organisations that lack dedicated security leadership — one of the only MDR vendors to bundle CISO-level advisory at scale · Sophos PR · GlobeNewswire · SecurityWeek

Feb 5 Zscaler → SquareX Undisclosed Browser security / zero trust for the AI era; extends Zscaler's inline proxy architecture into the browser layer for AI-agent traffic and data controls · Zscaler IR · SecurityWeek

Feb 3 Varonis → AllTrue.ai $150M AI trust, risk, and security management (TRiSM); enables Varonis customers to monitor and govern AI agent behavior and reduce AI-introduced data risks · GlobeNewswire · SecurityWeek

Feb 3 Logicalis US → Maple Woods Enterprises Undisclosed Managed security services provider; adds Maple Woods' "Overwatch" cybersecurity and compliance program (built to federal/regulated-sector standards) to Logicalis's services framework, expanding into healthcare and SLED (state, local, education) markets · PR Newswire

Feb (TBD) Arctic Wolf → Sevco Security Undisclosed Attack surface management (ASM) into Arctic Wolf's managed SOC platform; improves asset inventory and exposure visibility for managed detection customers · SecurityWeek

January 2026

Jan 29 Palo Alto Networks → Chronosphere $3.35B Cloud-native observability for AI-era data volumes; visibility/security at scale · CTech

Jan 27 LevelBlue → Alert Logic MDR (from Fortra) Undisclosed MSSP consolidation: LevelBlue acquires Fortra's Alert Logic managed detection and response (MDR), extended detection and response (XDR), and web application firewall (WAF) services business; Fortra transitions to a technology partner; extends LevelBlue's managed security services portfolio and customer base in the SMB and mid-market segments · CyberScoop · LevelBlue PR

Jan 26 Radware → Pynt Undisclosed Israeli API security testing startup; adds automated pre-production API security testing + dynamic vulnerability discovery to Radware's API portfolio; extends protection across the full API lifecycle from design through runtime; acquired at close (not just announced) · GlobeNewswire/Security Solutions Media · SecurityWeek

Jan 26 OVHcloud → Seald Undisclosed French E2E encryption startup with ANSSI CSPN security visa; zero-knowledge model encrypts data client-side before upload — neither host nor admin can access plaintext; Seald SDK natively integrated into OVHcloud's Secret Manager, KMS, and HSM catalogue; sovereign European cloud data-protection play · OVHcloud PR · Channel Web · SecurityWeek

Jan 26 Horizon Capital → Threatscape Undisclosed (majority-stake growth investment, Horizon's 4th from Fund III) UK PE firm backs Threatscape (Dublin-based cybersecurity services specialist, UK/Ireland footprint) to fund organic growth, a buy-and-build M&A strategy and IP investment, with planned expansion into Europe/North America -- January 2026 backfill · Horizon Capital · TechCentral.ie

Jan 20 FGS Global → Memetica Undisclosed KKR-backed strategic-communications firm acquires threat-intel/digital-risk consultancy Memetica (AI-driven detection of coordinated hostile activity across social, dark-web and fringe platforms) and launches a new AI Advisory practice around it; Memetica was long an FGS partner before the buyout -- January 2026 backfill · FGS Global · Business Wire

Jan 15 Delinea → StrongDM Undisclosed PAM leader acquires JIT runtime authorization and universal access management (infrastructure, databases, AI agents); eliminates standing credentials in favour of access granted at the moment of action; closed March 5, 2026 · Delinea PR · MSSP Alert

Jan 15 Parsons Corporation → Altamira Technologies (from ClearSky) ~$385M ($340M base + $45M earn-out) National security IT and cybersecurity services firm (McLean, VA; 600+ employees, 90%+ clearance-holders); delivers advanced analytics, SIGINT, cyber, missile warning, and space capabilities; adds to Parsons' Defence & Intelligence unit; closed January 15, 2026 · Parsons IR · GlobeNewswire · SecurityWeek

Jan 14 Infoblox → Axur Undisclosed AI-powered external threat discovery and digital risk protection; adds brand-abuse, credential-exposure, and phishing takedown capabilities (40M+ URLs/day scanned); closes May 5, 2026 · Infoblox PR · BankInfoSecurity

Jan 14 Diligent → 3rdRisk Undisclosed Adds AI-native third-party/vendor risk management (automated due diligence, continuous monitoring) to Diligent's GRC platform · Corporate Compliance Insights

Jan 13 CrowdStrike → Seraphic Security ~$420M Israeli browser runtime security firm; decouples security from the browser itself — enforces policy within Chrome, Edge, Safari, Firefox, and agentic browsers on managed and unmanaged devices alike; turns any browser into a secure enterprise browser without forced migration; closes Q1 FY27 · CrowdStrike PR · CTech · CyberScoop

Jan 12 OneSpan → Build38 Undisclosed Mobile app protection SDK spinoff from Giesecke+Devrient; adds client-side on-device app-shielding, runtime application self-protection (RASP), and SDK hardening to OneSpan's identity verification and e-signature portfolio; closed March 2, 2026 · OneSpan IR · SEC 8-K

Jan 12 Sole Source Capital → Brite Undisclosed PE firm's first platform deal from Fund III -- acquires Brite (Victor, NY, est. 1983), a cybersecurity and managed-IT-services provider serving finance/healthcare/insurance/education/public-safety clients -- explicit buy-and-build base in a fragmented MSSP market; CEO/President retained -- January 2026 backfill · Business Wire · MSSP Alert

Jan 8 ThreatModeler → IriusRisk $100M+ Spain-based threat modeling platform (Paladin Capital-backed); unites the top two enterprise threat modeling platforms; $50M combined ARR; positions for AI-era design-time security in the application security market; deal closed end-2025, announced Jan 8 · Fortune · PRNewswire · ThreatModeler PR

Jan 8 CrowdStrike → SGNL $740M Continuous identity and dynamic authorization startup; grants/revokes access for human, non-human (NHI), and AI agent identities in real time based on contextual risk — eliminates standing privileges; integrates into Falcon Identity Protection; closes Q1 FY27 · CrowdStrike PR · The Register

Jan 8 JumpCloud → MacSolution Undisclosed Brazil's largest JumpCloud MSP (São Paulo); acqui-hire to build a LatAm GTM hub for JumpCloud's open directory/identity platform; expands JumpCloud's presence in the largest enterprise IT market in South America · JumpCloud PR · SiliconANGLE

Jan 7 Gryphon Investors → Fortreum Undisclosed PE firm takes majority growth stake in Fortreum (Lansdowne, VA) -- cybersecurity compliance/audit/technical-testing (FedRAMP, CMMC, ISO, PCI, SOC) -- to fund expansion of its XRAMP continuous-validation platform; founders retain significant equity -- January 2026 backfill · Gryphon Investors · PE Professional

🧩 Consolidation by subsector

Every tracked deal and funding round, grouped by cyber subsector (taxonomy anchored on Momentum Cyber CYBERscape + Gartner market segments — see Methodology). Sorted by deal count: where buy-side attention is concentrating, and by omission, where it isn't.

Security Services43

deal(s) · $968M disclosed

Latest — Oct 2026: Alchemy Technology Group → Freeit Data Solutions

Identity & Access28

deal(s) · $29.3B disclosed

Latest — Oct 2026: Vista Equity Partners → HID PKI business unit (IdenTrust, HydrantID, ZeroSSL)

AI Security & Governance27

deal(s) · $925M disclosed

Latest — Oct 2026: Hex-Rays → HexAI (formerly Ventris)

GRC & Trust15

deal(s) · $11.4B disclosed

Latest — Oct 2026: EC-Council → Cyber Insurance Academy

Security Operations13

deal(s) · $4.1B disclosed

Latest — Sep 2026: Palo Alto Networks → Console

Application & Supply Chain13

deal(s) · $650M disclosed

Latest — Sep 2026: S&P Global → OpenZeppelin

Data Security & Privacy13

deal(s) · $82M disclosed

Latest — Oct 2026: Proofpoint → Varonis Systems

Exposure Management12

deal(s) · $1.1B disclosed

Latest — Oct 2026: Main Capital Partners → Raynet GmbH

OT / ICS / IoT5

deal(s) · $4.3B disclosed

Latest — Jul 2026: Qualcomm → SAM Seamless Network (Securing Sam Ltd.)

Fraud & Identity Verification5

deal(s) · $2.4B disclosed

Latest — Aug 2026: Socure → Fravity

Endpoint & Device4

deal(s) · $975M disclosed

Latest — Jul 2026: Institutional investors → ThreatLocker

Email & Human Risk4

deal(s) · $36M disclosed

Latest — Sep 2026: MSP Process → Triggr

Network & Edge2

deal(s) · — disclosed

Latest — Jun 2026: Francisco Partners → EfficientIP

Cloud Security1

deal(s) · — disclosed

Latest — Aug 2026: Crescent Cove Advisors, Greylock, Menlo Ventures → Obsidian Security

Other / Unclassified6

deal(s) · $2.4B disclosed

Latest — Sep 2026: Bold Eagle Acquisition Corp. (Nasdaq: BEAG) → REDLattice (parent of Paragon)

Full deal record

Cybersecurity M&A, 2026 onward. Deals filed by announcement month; de-duplicated by buyer + target. US & Europe prioritised, notable global deals included.

October 2026

Date	Buyer	Target(s)	Value	Rationale	Source
Oct 28	Alchemy Technology Group	Freeit Data Solutions	Undisclosed	Houston-based IT advisory/reseller (backed by Avance Investment Management) adds Freeit's 16+ years of Texas SLED (state/local/education) procurement relationships and cybersecurity services -- Alchemy's third disclosed acquisition in 2026	PR Newswire · Dealroom
Oct 22	Intelligent Protection Management Corp.	Advanced Technology Distributors (IT/telecom/connectivity/managed-services business)	Up to $2.7 million (cash plus note and earnout, two-stage close, before customary adjustments)	IPM (Nasdaq: IPM), a managed technology solutions provider focused on cybersecurity and cloud infrastructure, adds AdTech's managed-services customer base as a bolt-on, continuing the growth-by-acquisition strategy it began with its January 2025 purchase of Newtek Technology Solutions.	SEC 8-K
Oct 22	Forte Technologies	Business Cyber Security Solutions (BCSS)	Undisclosed	Lookback catch-up: Forte Technologies (managed IT/cloud/cybersecurity provider) acquires BCSS (Inverness, IL compliance firm, founded 2016, serves MSPs and defense contractors with CMMC/HIPAA/SOC2/PCI DSS/GLBA/ISO compliance validation), relaunching it as the Forte Cyber Assurance practice with security implementation kept separate from independent evaluation.	citybiz · Fundz
Oct 21	EC-Council	Cyber Insurance Academy	Undisclosed	EC-Council (EQT-backed cybersecurity certification/training company) expands from pure cybersecurity training into insurance-sector risk education, acquiring the Tel Aviv-based cyber-insurance training/credentialing provider; co-founders stay on, brand retained as an EC-Council Company, and its Certified Cyber Insurance Specialist credential is being rebuilt to add AI-risk/AI-governance content	GlobeNewswire · Insurance Journal
Oct 19	Hex-Rays	HexAI (formerly Ventris)	Reported $30-35M (unofficial estimate, not confirmed by either company)	Lookback catch-up: Hex-Rays (Belgian maker of the IDA Pro reverse-engineering tool) acquires HexAI (Tel Aviv AI-agent security-research-workflow startup, founded 2025 as Ventris, bootstrapped with no outside capital, 6 employees), bringing AI-driven vulnerability/malware research tooling in-house.	SecurityWeek · Calcalist
Oct 16	Vista Equity Partners	HID PKI business unit (IdenTrust, HydrantID, ZeroSSL)	Undisclosed (unit had ~$58M 2025 revenue)	ASSA ABLOY/HID carve-out sale of its PKI-as-a-service business (certificate authority, credential management, ZeroSSL); found via the private-equity-newsroom sweep (Vista's own press page), a catch-up this desk missed in-window; closing expected Q4 2026	Vista Equity Partners · ASSA ABLOY
Oct 15	Proofpoint	Varonis Systems	$6.3 billion all-cash ($49.75/share)	Proofpoint (Thoma Bravo portfolio company) signs a definitive agreement to buy Varonis, adding data-security-posture-management and data-classification depth to Proofpoint's email/human-risk-centric platform to counter AI-accelerated data-exfiltration threats; Varonis had drawn earlier preliminary interest from Blackstone, Thoma Bravo and Vista.	Varonis 8-K (SEC) · CTech
Oct 15	Cohere	AISLE	Undisclosed (letter of intent, not yet a binding agreement)	Cohere signs a letter of intent to acquire AISLE, a San Francisco/Prague AI vulnerability-detection and remediation startup (founded by ex-Avast CEO Ondrej Vlcek, ex-Rapid7 CISO Jaya Baloo, ex-Anthropic researcher Stanislav Fort; credited with 500+ CVEs including 18 of 24 curl flaws fixed in its latest release), and stands up a new Cohere Cyber division around it; AISLE's ~50 staff expected to join.	Cohere · BetaKit
Oct 13	Bytes Technology Group	CyberOne	£19.4M initial cash (+ up to £18.0M performance earnout over 16 months)	Bytes Technology Group (LSE: BYIT), a UK IT/software reseller, buys CyberOne, a London-headquartered MSSP (80+ staff, UK/Philippines) with Microsoft Security Elite Partner status and £9.5M revenue (12mo to Jul 2026) -- Bytes' first acquisition since listing, deepening its Microsoft-focused MSSP offering. Subject to UK National Security and Investment Act 2021 clearance.	ComputerWeekly · Investegate RNS
Oct 13	Workday	C1.ai	Undisclosed	Agentic identity platform governing access for both employees and AI agents (connects to email, CRM, code repos, finance systems, cloud infra); extends Workday's Agent System of Record into access governance; announced at Workday Rising; a catch-up this desk missed in-window; closing expected Workday fiscal Q4 2027	Workday
Oct 13	Anthropic	Opaque Systems	Undisclosed (reported as a licensing/acqui-hire; Opaque had raised $24M Series B at a $300M valuation)	Confidential-computing AI startup (UC Berkeley RISELab spinout) letting enterprises run AI models/agents on sensitive data without exposing it to the model provider; reports differ on deal structure — Anthropic is licensing Opaque's tech and hiring part of its team rather than a clean acquisition; a catch-up this desk missed in-window, flagged for the ambiguous structure	Constellation Research · The New Stack
Oct 12	IonQ	Elisity	Up to $1.3B (all-stock, incl. up to $150M earnouts)	Quantum-computing firm diversifies into cybersecurity, acquiring Zero Trust identity-based microsegmentation vendor Elisity (100+ enterprise deployments) to pair post-quantum cryptography/QKD work with enterprise Zero Trust tooling; expected to close Q4 2026 pending regulatory approval	IonQ · CNBC
Oct 6	Main Capital Partners	Raynet GmbH	Undisclosed (majority stake, ~170 employees)	Dutch PE firm buys majority stake (from PINOVA Capital) in the Paderborn, Germany-based IT visibility/IT asset management and cybersecurity platform 'Raynet One' to fund international expansion and buy-and-build; strong DACH base, growing North America presence	Main Capital Partners
Oct 6	Tiny	Oso Cloud	$1.9M (cash, CAD)	Lookback catch-up: Tiny (TSXV/OTC roll-up holding company) acquires the product and customer assets of Oso Cloud (NYC-based authorization/access-control-as-a-service startup, ~$5.3M ARR, ~80 customers; deal closed Oct 1, announced Oct 6). Oso's founding team, including CEO Graham Neray, separately joined Temporal Technologies to build AI-agent authorization controls -- a hire, not part of this acquisition.	BetaKit · CanTechLetter
Oct 5	SAIC	Information Security Corporation (ISC)	Undisclosed	Tuck-in acquisition of a 30+-year PKI/certificate-authority vendor (CertAgent, NIAP-approved CA on NSA's CSfC components list) to expand zero-trust architecture and post-quantum cryptography capability for defense/intelligence customers	Washington Technology · Finviz/GlobeNewswire syndication
Oct 2	SGS	Prescient Security	Undisclosed	SGS acquires majority stake in US compliance/cybersecurity certifier (SOC2, ISO, PCI DSS, HITRUST, FedRAMP, CMMC) to expand its Digital Trust services arm	PR Newswire · Dealroom
Oct 1	Indra Group (IndraMind)	TRC	Undisclosed (30% stake, option to raise to 100% within 2 years)	Deepens IndraMind's sovereign cybersecurity portfolio -- TRC (400+ staff, Madrid) protects Spanish defense, border and critical-infrastructure systems	Indra Group · Dealroom

September 2026

Date	Buyer	Target(s)	Value	Rationale	Source
Sep 30	TRG (Inversion6)	Fentron	Undisclosed	TRG's Inversion6 cybersecurity division adds Fentron's CISO advisory, ransomware-readiness, vulnerability management and incident-response-prep practice across financial/manufacturing/government/healthcare clients	PR Newswire · PE Hub
Sep 28	Quantum eMotion	Plurilock Security	~US$24.8M (all-share-and-cash arrangement, ~100% premium to 20-day VWAP)	Quantum-resistant crypto/QRNG vendor Quantum eMotion acquires Plurilock's AI-driven identity/authentication platform and commercial customer base (US/Canadian government + enterprise), converting from a technology-validation company into a revenue-generating cybersecurity business	Quantum eMotion · Plurilock
Sep 28	Bold Eagle Acquisition Corp. (Nasdaq: BEAG)	REDLattice (parent of Paragon)	$1.25B pre-money enterprise value, $335M committed PIPE anchored by Loomis Sayles	SPAC de-SPAC merger taking defense/offensive cyber-intelligence firm REDLattice (parent of spyware vendor Paragon) public as 'REDL', expected to close ~year-end 2026 -- a go-public listing event, not a strategic acquisition; catch-up, missed by the Sep30/Oct1 sweeps	SiliconANGLE · The Record
Sep 25	Epiq	Canopy	Undisclosed	Legal/eDiscovery and breach-response services firm (87%+ of breach counsel, 70%+ of cyber insurers as clients) acquires patented data-breach-response/privacy platform that assesses exposed data and identifies impacted individuals; folds into Epiq AI for Cyber	GlobeNewswire · Epiq Global
Sep 24	Shield Technology Partners	Nerds Support	Undisclosed	20th MSP acquisition for Shield's consolidation roll-up platform, adding a Miami-based managed IT/cybersecurity provider with accounting, law and wealth-management vertical strength	Channel Dive
Sep 24	IBM	Logiq Consulting	Undisclosed	NCSC-assured UK cybersecurity consultancy (assurance, Secure by Design, secure systems engineering, secure managed services) for UK Defence/CNI/Public Sector; adds DISX sovereign-collaboration platform; extends IBM's cyber transformation portfolio alongside SiXworks	IBM Newsroom · Channelweb
Sep 24	Omada	EmpowerID	Undisclosed	IGA vendor adds runtime/real-time AI-agent governance to close the 'AI agent security gap' alongside its identity governance suite -- catch-up, missed by the Sep30/Oct1 sweeps	Omada · KuppingerCole
Sep 23	Upwind	Aegis	Undisclosed (all-stock, reported ~$25-50M)	AI-security platform vendor Upwind picks up Israeli AI-cybersecurity startup Aegis, a catch-up record for a deal missed by prior sweeps (one day before this run's 72h window, flagged by today's sweep for recording per F-23's look-back-catch-up rule).	Axios Pro · CTech
Sep 23	Nomios	Orbcom	Undisclosed (~€15M annual revenue business)	Nomios (pan-European cybersecurity services specialist, Keensight Capital-backed) enters Portugal/Iberia by acquiring Orbcom, a Portuguese cybersecurity-services and IT-consulting firm (~80 FTE, Palo Alto Networks Diamond Innovator partner). Catch-up record from this run's PE-newsroom sweep family.	Keensight Capital · Pulse2
Sep 22	IT Solutions Technology Partners	STACK Cybersecurity	Undisclosed	Philadelphia-based North American MSP acquires Detroit-metro MSSP/AI-enablement firm STACK Cybersecurity, adding cybersecurity governance/compliance and AI-adoption capabilities and expanding its Michigan footprint	PRWeb
Sep 22	A-LIGN	AssurePoint	Undisclosed	A-LIGN's formal entry into the Australian market, adding IRAP (Infosec Registered Assessors Program) certification capability for cloud security assessments needed by companies pursuing Australian government/public-sector contracts	PR Newswire · MSSP Alert
Sep 22	MSP Process	Triggr	Undisclosed	AI-powered MSP service-desk automation platform folds Triggr's Phishr security-awareness/phishing-simulation product into its automation platform	MSSP Alert · MSP Process
Sep 17	S&P Global	OpenZeppelin	Undisclosed	Acquires the security standard for onchain finance -- smart contract security audits and the industry-standard OpenZeppelin Contracts open-source library (behind $37T in value transferred, 900+ security engagements, 10,000+ vulnerabilities surfaced pre-production); OpenZeppelin operates as a separate unit under CEO Demian Brener, complementing S&P Global's risk-assessment and digital-asset ecosystem push as capital markets move onchain	S&P Global PR · PR Newswire · OpenZeppelin
Sep 16	Quorum Cyber	Ontinue	Undisclosed	Definitive agreement: Edinburgh-based Microsoft-centric MDR/IR provider buys Zurich-based MXDR provider Ontinue (Agentic SOC, five-time Microsoft partner) to form a Microsoft-first agentic SOC across North America, UK and DACH; Eterna Growth Partners stays majority investor of the combined company; subject to closing conditions	Quorum Cyber PR (PR Newswire) · Ontinue · DIGIT
Sep 16	CyberMaxx	Avertium	Undisclosed	Periscope Equity-backed mid-market MDR provider buys Microsoft-focused MDR/GRC/offensive-security firm Avertium (closed Sep 11, announced Sep 16); fills CyberMaxx's Microsoft MDR gap, in-sources GRC it previously outsourced, adds pen-testing/purple-teaming and new TSD channel partners (Avant, GTS); CyberMaxx's latest in a roll-up after Corvid Cyberdefense, Cybersafe Solutions and onShore Security	CyberMaxx PR · PRWeb · Channel Dive
Sep 16	Niobrara Capital	MSP Corp	Undisclosed	New York PE firm buys one of Canada's largest managed IT and cybersecurity services platforms (2,300+ recurring clients, ~500 staff, 12 offices across 6 provinces) from Alfar Capital, Walter Capital Partners and BDC Capital, capping a four-year Quebec-to-national roll-up; plans to deepen Canadian footprint and extend into the US	PR Newswire · PE Hub
Sep 15	eSentire	Undisclosed stealth-mode AI security startup	Undisclosed	Acquires an unnamed stealth-mode AI-security startup, fully incorporated into eSentire's Atlas Platform as the new Atlas AIDR module -- real-time record of AI agent activity including full conversation timeline, tool calls with inputs/outputs, token/cost accounting, latency and security events	AiThority
Sep 15	Worldwide NFT	RedTrace Technologies	Undisclosed	OTC-listed Worldwide NFT (WNFT) signs LOI to acquire 100% of RedTrace Technologies, a Maryland-based cyber-intelligence-driven security firm serving Federal Civilian, DoD and US Intelligence Community clients (several million dollars in annual revenue, positive run-rate EBITDA); led by former Army Signal Corps/US Cyber Command/NSA/FBI veteran Kelo Makelele. LOI stage only -- subject to due diligence and a definitive purchase agreement, expected to close Q4 2026	GlobeNewswire
Sep 11	Kiteworks	Bonfy.AI	Undisclosed	Adds AI-native content-security platform (real-time classification, contextual enforcement of sensitive data across human and AI-agent workflows) to Kiteworks' runtime data-governance control plane -- catch-up, missed by prior sweeps	SecurityWeek · SC World
Sep 9	ISMG	INE	Undisclosed	ISMG (Information Security Media Group) acquires INE, a hands-on networking and cybersecurity training/certification provider trusted by Fortune 500 enterprises in 190+ countries; ISMG's most ambitious commitment in two decades to expand readiness training across networking, cybersecurity, identity, AI and OT security. Catch-up: missed by prior sweeps' 72h look-back window.	GlobeNewswire
Sep 9	SecureSky	Soveren	Undisclosed	Omaha-based exposure-management/MDR provider adds Soveren's real-time, ML-driven DSPM (London-based, eBPF network analysis) to its Active Protection Platform. Catch-up record from this run's trade-press sweep family.	PR Newswire · Dealroom
Sep 3	Xpect Solutions	Amivero	Undisclosed	Federal technology company expands national-security services across cybersecurity, digital modernization, AI/data and identity disciplines, adding Amivero's fraud/intelligence-ops and digital-identity work; combined firm passes 450 staff	https://www.prnewswire.com/news-releases/xpect-solutions-acquires-amivero-expanding-technical-capabilities-and-customer-depth-across-national-security-302868339.html
Sep 2	NetSPI	Synack	Undisclosed	Definitive merger agreement forms a combined offensive-security platform (pen testing plus continuous/crowdsourced security validation) with 800+ staff and $200M+ combined revenue; expected to close October 2026, subject to customary closing conditions. Catch-up: true announcement date Sep 2, missed by prior runs' M&A sweeps	NetSPI PR · Synack PR · GlobeNewswire
Sep 2	Tusker	Fortress SRM	Undisclosed	Tusker acquires Cleveland-based Fortress SRM, adding ~50 cybersecurity professionals, a 24/7 Security Operations Center and capabilities spanning security consulting, virtual CISO, managed security, incident response and digital forensics; Tusker's fifth acquisition since 2017 and first since consolidating its portfolio companies under one brand. Catch-up: missed by prior sweeps' 72h look-back window.	PR Newswire
Sep 2	Pistachio	Hugin Cybersecurity AS (Hugin.io)	Undisclosed	Oslo-based security-awareness-training/human-risk-management vendor Pistachio acquires Hugin's cyber-risk assessment and compliance-posture IP (technology/IP only, no staff transfer) to launch a cybersecurity compliance and posture-management product in 2027. Catch-up: missed by prior sweeps' 72h look-back window.	SiliconANGLE
Sep 1	Palo Alto Networks	Console	~$500M (reported by TechCrunch, unconfirmed by company)	Palo Alto Networks acquires two-year-old AI-agent IT-helpdesk automation startup Console (Thrive Capital/DST Global-backed), folding it into Cortex to automate SOC alert triage and routine security-operations tasks; Palo Alto's seventh acquisition of 2026. Catch-up: missed by prior sweeps' 72h look-back window.	PR Newswire · TechCrunch
Sep 1	A-LIGN	Pathfynder	Undisclosed	Adds offensive/defensive security services (penetration testing, red teaming, incident response) to A-LIGN's audit/certification platform -- catch-up, missed by prior sweeps	A-LIGN · SecurityBrief Australia

August 2026

Date	Buyer	Target(s)	Value	Rationale	Source
Aug 27	Socure	Fravity	Undisclosed	Agentic AI-native fraud/risk/compliance investigation platform, folded into Socure's RiskOS as RiskOS_Agents (starting with watchlist screening and KYB checks); announced alongside a $156M strategic growth investment (led by Summit Partners) valuing Socure at $5.2B; Fravity deployments show 80% lower cost-per-case, 5x faster resolution, 70% fewer false positives	Crunchbase News · BankInfoSecurity
Aug 19	Brinqa	PlexTrac	Undisclosed	Penetration testing and offensive-security reporting platform; closes the CTEM (Continuous Threat and Exposure Management) loop by adding attacker-perspective validation and proof-of-remediation; makes Brinqa the largest standalone unified exposure management vendor (3,000+ customers, 57 countries, 25%+ of Fortune 500)	https://www.helpnetsecurity.com/2026/08/19/brinqa-plextrac-acqisition/
Aug 19	Munich Re (via HSB)	$575M	75M	Cyber insurtech serving US SMEs with integrated cyber insurance and managed detection and response (MDR); Munich Re's largest disclosed primary-cyber-market move; At-Bay overseen by Hartford Steam Boiler (HSB), Munich Re's Global Specialty Insurance unit; closing expected Q1 2027; strengthens Munich Re's position combining insurance underwriting with proactive risk mitigation technology	Munich Re PR · Insurance Journal
Aug 19	Cribl	Radiant Security (AI SOC assets)	Undisclosed	Acquires Radiant Security's AI SOC product IP (autonomous alert triage, investigation, resolution), to be adapted as an application on Cribl's telemetry platform; Cribl's second security acquisition of 2026 after CardinalOps (Jul); more platform additions expected at CriblCon Sep 28	Cribl · Security Boulevard
Aug 17	Fortinet	Virtue AI	Undisclosed	AI runtime protection specialist with automated testing, real-time protection, and compliance oversight for AI models, conversational applications, and autonomous agents; integrated into Fortinet's Security for AI strategy and FortiGate platform; Gartner projects AI-security market to grow from .8B to 6.4B by 2030	Fortinet PR · SecurityWeek · Help Net Security
Aug 14	Datavault AI (NASDAQ: DVLT)	CyberCatch Holdings (TSXV: CYBE)	$94.5M all-cash	AI-enabled continuous compliance and cyber-risk mitigation platform (NIST CSF 2.0, CMMC 2.0, ISO 27001, HIPAA, PCI DSS); patented agentic AI for continuous control assessment and pen testing; Datavault deploys CyberCatch as compliance layer across DataValue/DataScore/IDE product suite	https://ir.datavaultsite.com/news-events/press-releases/detail/487/datavault-ai-will-acquire-cybercatch-in-an-all-cash-transaction
Aug 12	Undisclosed	A Security	$37M Series B	Autonomous offensive security testing platform; AI-driven red-teaming.	https://www.securityweek.com/category/cybersecurity-funding-news/ma/
Aug 12	Undisclosed	Tenet Security	$6M seed	Early-stage cyber startup; seed funding round August 2026.	https://www.securityweek.com/category/cybersecurity-funding-news/ma/
Aug 7	AXA XL	S-RM	Undisclosed	Full acquisition of remaining shares in S-RM, a global corporate intelligence and cybersecurity consultancy (incident response, threat intelligence, integrity due diligence) operating in 140 countries; AXA XL integrates S-RM into its new AXA XL Risk Advisory unit, extending its prevention-focused offering beyond insurance underwriting into consultancy; transaction expected to close by end-September 2026	AXA XL PR · Insurance Journal
Aug 4	Crescent Cove Advisors, Greylock, Menlo Ventures	Obsidian Security	5M Series D (.1B valuation)	Non-human identity and AI-agent security for SaaS/cloud; 60 Fortune 500 customers; unicorn milestone	https://pulse2.com/obsidian-security-raises-85-million-series-d-at-1-1-billion-valuation/
Aug 4	CrowdStrike Falcon Fund	Above Security	Undisclosed (strategic investment)	AI-native managed insider threat platform; integrates with Falcon Next-Gen SIEM telemetry for insider risk investigations	https://www.msspalert.com/brief/crowdstrike-invests-in-above-security-adds-insider-risk-investigations-to-falcon
Aug 4	Norwest Venture Partners, SoftBank Vision Fund 2, Hitachi Ventures, LG Technology Ventures, Qumra Capital, Vertex Ventures, Third Point Ventures, DTCP, Intel Capital	Zenity	$125M Series C ($180M total raised)	AI agent security governance platform (Tel Aviv, 2021) — governs agent intent, allows/blocks autonomous actions; targets the 1-billion AI-agent deployment wave; largest AI-agent-security raise of H2 2026	https://zenity.io/company-overview/newsroom/company-news/zenity-raises-125-million-to-secure-the-era-of-1-billion-ai-agents/
Aug 4	Ballistic Ventures, Canon Capital, Greenfield Partners, Lightspeed, Red Dot Capital, TLV Partners	Oligo Security	$60M Series C ($140M total raised)	Runtime application security covering code, cloud workloads, and AI systems; addresses AI-accelerated exploit development	https://www.securityweek.com/oligo-raises-60-million-for-runtime-security/
Aug 3	Visa	BioCatch	$2.4B	Behavioral biometrics AI platform protecting 1.8B devices and 760M users across 350+ banking clients in 21 countries; fills AI-powered fraud detection gap as account takeovers and scams cost economy $1T+ annually; deal closes Q2 FY2027 pending regulatory approval	https://investor.visa.com/news/news-details/2026/Visa-to-Acquire-BioCatch/default.aspx
Aug 3	Bank of America	MDSec Consulting Limited	Undisclosed	Acquires UK red-team/pen-testing consultancy (~65 staff, Macclesfield) to internalise offensive security expertise alongside existing Chester cyber ops center	https://www.finextra.com/newsarticle/48179/bofa-to-buy-uk-cybersecurity-firm-mdsec-consulting
Aug 3	Deel	Clarity	~5-50M	Deepfake detection and AI identity verification embedded into Deel HR/payroll platform; combats projected 1-in-4 fraudulent candidate profiles by 2028	https://www.deel.com/blog/deel-acquires-clarity/
Aug 1	SYN Ventures, DataTribe, TEDCO (lead: SYN Ventures)	Balance Theory	$19M Series A	AI-driven CISO investment management platform; helps enterprises evaluate and optimise security spending across $1B+ portfolios; addresses portfolio visibility gap for large-enterprise security teams	https://www.securityweek.com/balance-theory-raises-19-million-to-help-enterprises-manage-cybersecurity-investments/

July 2026

Date	Buyer	Target(s)	Value	Rationale	Source
Jul 31	Cycurion (NASDAQ: CYCU)	Unnamed DC-based federal cybersecurity firm	Undisclosed	Federal cybersecurity services; acquisition announced alongside record contracted backlog exceeding $150M; expands Cycurion's footprint in US government/defense cyber services	https://www.stocktitan.net/news/CYCU/cycurion-nasdaq-cycu-announces-definitive-agreement-to-acquire-y1exn1qhhm08.html
Jul 30	Institutional investors	ThreatLocker	$190M Series D	Zero Trust endpoint security platform; round framed around AI threat protection and endpoint isolation for enterprise and MSP markets; Florida-based, ~3.5M protected endpoints	https://fintech.global/2026/07/30/threatlocker-lands-190m-as-ai-threats-reshape-security/
Jul 30	Okta	Permiso Security	~$200M	Identity threat detection startup (co-founded by ex-FireEye executives Paul Nguyen and Jason Martin); behavioral analytics across human, non-human, and AI agent identities; fills non-human identity (NHI) and AI agent security gap in Okta's portfolio; deal expected to close Q3 FY2027	https://www.securityweek.com/okta-to-acquire-identity-threat-detection-firm-permiso/
Jul 29	Bessemer Venture Partners, Cyberstarts, TCV	Onyx Security	13M Series B (40M valuation)	AI-agent control plane keeping humans in authority over autonomous enterprise AI agents; Unit 8200 founders	https://www.timesofisrael.com/israeli-cyber-startup-raises-113m-to-secure-and-control-autonomous-ai-agents/
Jul 28	Cyera	Oasis Security	~$1B (LOI)	Non-human identity (NHI) and AI agent security startup (machine identity governance, service accounts, API keys, AI agent permissions); deal creates a combined data security + NHI platform at a time when AI agent proliferation is outpacing identity controls; Cyera recently raised $600M at $12B valuation; cash-majority deal	https://techcrunch.com/2026/07/28/cyera-agrees-to-acquire-oasis-security-for-1b-to-safeguard-proliferating-ai-agents/
Jul 28	Team8, Bessemer Venture Partners, Hetz Ventures, Claltech, Notable Capital, Startpoint Capital, SVCI (investors)	Act Security	$60M Seed + Series A	AI agent control and cloud security platform; stealth launch July 28; headquartered Tel Aviv; addresses AI agent permission management and control-plane visibility for enterprises deploying agentic AI workloads	https://www.chinatechnews.com/2026/07/29/126373-venture-capital-startup-funding-roundup-july-28-2026-battery-ventures-bessemer-gradient-team8-y-combinator-more
Jul 28	Team8, Battery Ventures, YL Ventures (investors)	Hush Security	$30M Series A	Machine access governance platform for enterprise AI agents and their infrastructure; Akamai Technologies joining as strategic investor; addresses control-plane gap as enterprises deploy AI agents at scale; founded 2024, less than one year from stealth to Series A	https://www.securityweek.com/hush-security-raises-30-million-for-ai-agent-governance/
Jul 28	Canaan Partners, Insight Partners, Team8, M12 (Microsoft Venture Fund)	Mate Security	$35M Series A	AI-native agentic security operations platform; brings total funding past $50M (eight months post-stealth); 500%+ revenue growth since Q3 2025; enterprise SOC automation targeting AI-speed threats; Black Hat USA 2026 exhibitor (Booth 4717, Aug 3-6)	https://pulse2.com/mate-security-raises-35-million-series-a-to-scale-agentic-security-operations-platform/
Jul 28	Katalyst (e4n)	Layer27	Undisclosed	Katalyst, e4n's first US MSP platform, tucks in Durham NC-based MSP/cybersecurity provider Layer27 (Microsoft-focus, healthcare/regulated clients)	ChannelE2E · citybiz
Jul 27	United Ventures (investor)	Beelzebub	€3.3M seed	AI-native deception platform (LLM-powered honeypots for servers, databases, APIs, cloud, IoT); NIS2 compliance tooling; targeting European enterprises	https://tech.eu/2026/07/27/beelzebub-raises-eur3m-to-strengthen-enterprise-cyber-defence-with-ai/
Jul 27	Keyfactor	Cofide	Undisclosed	Extends PKI-based verified identity to AI agents and cloud workloads; fills machine/agent identity gap for agentic AI deployments	https://www.keyfactor.com/press-releases/keyfactor-announces-intent-to-acquire-cofide-to-bring-verified-identity-to-ai-agents-and-cloud-workloads/
Jul 27	Bridgepoint	Lansweeper	$920M (majority stake, 8.0x revenue multiple)	PE buyout building 'the global leader in Technology Asset Intelligence powering enterprise cybersecurity' -- Ghent, Belgium-based cyber-asset/attack-surface intelligence platform; Insight Partners and Imker Group exit. Catch-up record: entirely absent from the tracker, found via this run's mandatory PE-newsroom sweep family.	Bridgepoint · Lansweeper
Jul 23	Battery Ventures, Accel, Foundation Capital	AegisAI	$36M Series A ($49M total raised)	AI-native email security countering AI spear-phishing surge (reported 5x increase); targets corporate inboxes with proprietary LLMs	https://www.prnewswire.com/news-releases/aegisai-raises-36-million-series-a-led-by-battery-ventures-to-fight-the-new-wave-of-ai-spear-phishing-302833624.html
Jul 23	Cheyenne Ventures, AVP (co-leads), Olive Hill Ventures	Abstract Security	$25M Series A extension ($50M total raised)	Composable streaming-first SIEM platform; 380% ARR YoY, 264% NRR — positioned as enterprise replacement for monolithic SIEM vendors	https://www.prnewswire.com/news-releases/abstract-raises-25-million-as-enterprises-shift-to-composable-security-operations-302832945.html
Jul 22	Andreessen Horowitz, Sequoia (investors)	Cathedral	$160M Series A ($1.4B valuation)	AI-native offensive and defensive cyber tooling for DoD and IC; founded by ex-DOGE alumni; targets defense-sector demand wave from Iran and Russia conflicts	https://www.usnews.com/news/top-news/articles/2026-07-22/exclusive-doge-alumni-launch-military-cyber-startup-with-1-4-billion-valuation
Jul 22	Sequoia, Cyberstarts, Greenoaks, Redpoint (investors)	Glow	$180M Series A ($1.2B valuation)	AI-native endpoint security purpose-built for agentic workloads and AI agents; founded by ex-Meta/Snowflake/Claroty team; targets coverage gap in traditional EDR for AI environments	https://www.globenewswire.com/news-release/2026/07/22/3331154/0/en/glow-emerges-from-stealth-with-180-million-to-reinvent-endpoint-security-in-the-ai-era.html
Jul 22	Cisco Investments (strategic)	Zafran Security	Strategic investment (>$140M total raised)	Threat exposure management platform; classifies 99% of critical CVEs as unexploitable in a given environment and focuses remediation on the 1% that matter; addresses CVE triage bottleneck	https://www.newswire.com/news/zafran-announces-strategic-investment-from-cisco-investments
Jul 21	Palo Alto Networks	Embrace	Undisclosed	Leading provider of user-focused observability; adds high-fidelity Real User Monitoring (RUM) and Digital Experience Monitoring (DEM/ADEM) capabilities to Palo Alto Networks Observability platform; also launching Synthetics for proactive application performance validation; Observability platform surpassed $300M ARR in Q3 FY26; expected close Q1 FY27	Palo Alto IR · GuruFocus · StreetInsider
Jul 21	Series A investors (Brightmind Partners led)	Empirical Security	5M Series A (7M total raised)	AI-driven CVE exploit-prediction platform; Foundation monitors 18k+ CVEs for exploit likelihood; Radiant provides org-specific threat identification; founded 2024 by Kenna Security / EPSS alumni	https://www.securityweek.com/empirical-security-raises-25-million-in-series-a-funding/
Jul 20	A16Z, Bessemer, Craft, Merlin (investors)	Neo	$100M (seed + Series A combined)	Agentic software control for enterprise AI: SecOps inventory, posture, attribution, and policy enforcement across AI agents, AI-enabled apps, agentic browsers, NHI identities, and traditional software; built by ex-SentinelOne/Wiz/Palo Alto veterans; addresses coverage gap as enterprises adopt agentic tools at speed	https://www.securityweek.com/neo-emerges-from-stealth-with-100m-to-control-and-secure-enterprise-ai-software/ · https://www.globenewswire.com/news-release/2026/07/20/3329638/0/en/neo-launches-with-100m-to-secure-ai-software-across-the-enterprise.html
Jul 17	Axiom Equity, Mercia (investors)	Risk Ledger	$32M Series B	Network-first third-party risk management platform mapping supplier risk at depth; US expansion; addresses supply-chain cyber gap in enterprise vendor risk programmes	https://www.securityweek.com/risk-ledger-raises-32-million-in-series-b-funding/
Jul 16	Signicat	Inverid	Undisclosed	Dutch NFC-based digital identity verification company behind ReadID, used by 50+ organisations including Rabobank, ING, Entrust and government entities in UK and Denmark; deal strengthens Signicat's EU digital identity platform ahead of EUDI Wallet rollout; Inverid tripled revenue under Main Capital ownership; founders reinvesting proceeds into Signicat	https://www.signicat.com/press-releases/signicat-acquires-inverid
Jul 16	CrowdStrike	XM Cyber (IP acquisition from Schwarz Digits)	Undisclosed (IP-only)	45+ patents and proprietary source code for exposure management and attack-path analysis added to Falcon; Schwarz Digits simultaneously expands sovereign-cloud partnership bringing Falcon to STACKIT cloud for European sovereign deployments	https://ir.crowdstrike.com/news-releases/news-release-details/crowdstrike-and-schwarz-digits-expand-strategic-partnership · https://www.calcalistech.com/ctechnews/article/rkx9rod4zl
Jul 16	NINJIO	SafeStack	Undisclosed	Developer-focused secure coding and AppSec training platform; NINJIO had been reselling SafeStack's Secure Code product, making this a vertical integration acqui-hire that embeds secure-code training natively into NINJIO's human-risk management platform (Gauge Capital portfolio)	https://www.prnewswire.com/news-releases/ninjio-acquires-safestack-to-expand-human-risk-management-platform-with-secure-code-training-302827087.html
Jul 15	Accel, Greylock, CRV, Hetz, AlphaDrive (investors)	Oak	$60M seed	AI-native Identity Operating System replacing fragmented legacy IGA/IAM stack with a single continuous control plane governing all human, machine, and AI agent identities; founded Dec 2025 by ex-SentinelOne (CEO Shai Morag); already GA and deployed across enterprise customers	https://www.securityweek.com/oak-emerges-from-stealth-mode-with-60-million-in-funding/ · https://techcrunch.com/2026/07/15/backed-by-60m-in-funding-oak-steps-out-of-stealth-to-fix-the-identity-mess-that-ai-agents-are-making-worse/
Jul 15	Foundation Capital, Zetta Venture Partners (investors)	Pulse Security	$8M seed	AI-powered CISO operational management platform: program visibility, business-risk communication, board reporting	https://www.globenewswire.com/news-release/2026/07/15/3327850/0/en/Pulse-Security-Debuts-Operational-Management-Platform-Built-for-Security-Leaders.html
Jul 14	Cribl	CardinalOps	~$100M est.	AI-native detection-engineering platform; automates SIEM rule translation and coverage-gap analysis; new Tel Aviv R&D hub; extends Cribl AI platform into full AI-SOC offering	https://www.globenewswire.com/news-release/2026/07/14/3327113/0/en/cribl-acquires-cardinalops-to-further-expand-its-ai-platform-into-security-operations.html
Jul 13	NEA, Lightbank, XTX, Sequoia (investors)	Valarian	$50M Series A	Sovereign and air-gapped AI compute infrastructure for defense and regulated sectors; first NEA bet on a European defense-tech startup	https://www.securityweek.com/valarian-raises-50-million-for-sovereign-infrastructure-control-layer/
Jul 9	Bessemer Venture Partners, Merlin Ventures, Evolution Equity Partners, Singtel Innov8 (investors)	QIZ Security	$17M seed	Post-quantum cryptography orchestration: inventories cryptographic assets, manages migration to PQC-compliant algorithms; ecosystem with Cisco, AWS, Google, CrowdStrike	https://www.securityweek.com/qiz-security-raises-17-million-for-cryptographic-governance-platform/
Jul 7	Barracuda Networks	Evo Security	Undisclosed	PAM/IAM specialist for MSPs — multi-factor authentication, privileged access management, and identity controls integrated into the BarracudaONE platform; positions Barracuda as a single-vendor security stack for MSP customers with native identity governance alongside its existing email, network, and application security	Barracuda PR · Help Net Security · SiliconANGLE
Jul 3	Zurich Insurance Group	BOXX Insurance	Undisclosed	Toronto-based global cyber insurtech (retail + SME cyber insurance across 5 continents; prior Zurich partnership since 2021); BOXX continues operating as a standalone entity integrated into Zurich Global Ventures (ZGV); accelerates Zurich's cyber coverage and protection services for retail and SME customers globally; BOXX's all-in-one cyber insurance + security services model extends Zurich's position in the SME cyber market that large commercial insurers have historically underserved	BOXX PR · Reinsurance News · InsurTech Digital · Insurance Business
Jul 3	Viatel Technology Group	FullProxy	Undisclosed	Glasgow-based cybersecurity consultancy; Viatel expands its UK & Ireland security portfolio with a specialist firm serving healthcare, public sector, education, and CNI verticals; FullProxy brings penetration testing, managed security services, and security consulting capabilities	digit.fyi · Viatel PR · SiliconRepublic
Jul 1	LevelBlue	Trustwave	Undisclosed	MSSP consolidation forming world's largest pure-play managed security services provider; Trustwave brings SpiderLabs (threat research, intelligence, threat hunting), MDR, offensive security, strategic advisory, incident response, and security software; combined entity also includes Stroz Friedberg and Elysium Digital; LevelBlue is the AT&T Cybersecurity spinoff (Dallas TX); deal positions LevelBlue to serve SMB through large enterprise and public sector	LevelBlue PR · MSSP Alert · SecurityBrief · GovConWire
Jul 1	Qualcomm	SAM Seamless Network (Securing Sam Ltd.)	>$150M	Israeli IoT/connected-device security startup protecting 500M+ devices across 15M+ ISP/telco networks; customers include AT&T, Verizon, Bezeq (Israel), Telenet (Belgium), Virgin Media (UK); SAM's on-device security layer protects home/enterprise IoT environments at network edge without routing traffic through the cloud; fits Qualcomm's edge-AI strategy — thickening on-device protection reduces cloud compute dependency and extends Snapdragon platform value into CNI and enterprise IoT security	CTech/Calcalist · Globes · MarketScreener · Telecompaper

June 2026

Date	Buyer	Target(s)	Value	Rationale	Source
Jun 30	Aikido Security	Root	~$70M	Belgian open-source AppSec unicorn ($1B valuation) acquires Israeli startup Root.io; Root deploys AI agents to generate and ship backported patches for vulnerable open-source library versions in 15–40 minutes — without forcing major version upgrades that break APIs; integrates into Aikido's platform as "Aikido Libraries," extending Aikido's ASPM from scanning into autonomous remediation for software supply-chain vulnerabilities	Help Net Security · Aikido Blog · CTech · GlobeNewswire
Jun 29	Intrusion Inc.	VigilAigent (from Tego Cyber)	Undisclosed	AI-native MSSP acquisition (~$3.5M ARR, 80+ reseller partners); combines VigilAigent's "The Oracle" agentic AI threat-detection engine with Intrusion's TraceCop platform; positions Intrusion as an AI-native managed security provider for SMB and mid-market	PR Inside/GlobeNewswire · StockTitan · SEC Form 8-K
Jun 29	CyberFOX	Timus Networks	Undisclosed	Tampa FL-based SASE + IAM startup for MSPs; adds secure web browsing, zero-trust network access, and adaptive access-policy enforcement to CyberFOX's single-vendor MSP security stack; both companies are Tampa-based and MSP-focused, creating an integrated SASE + endpoint + identity bundle	ChannelPro Network
Jun 26	Cyera	Otterize	Undisclosed (~tens of millions)	Cloud-native non-human identity (NHI) security startup (founded 2022; eBPF-based runtime agent that discovers and controls sensitive data flows in microservices and cloud-native workloads); Cyera's sixth acquisition, bolstering its DSPM and AI-governance stack with real-time data-lineage and workload-identity controls; Otterize backed by Index Ventures (raised $11.5M seed); co-founders are IDF 8200 alumni + former CTO of MuleSoft	Cyera PR · CTech
Jun 22	Booz Allen Hamilton	Ultra I&C Mission Solutions (from Cobham Ultra / Advent International)	$720M	Mission-critical software, encryption, and edge-compute products for US and allied defence and intelligence agencies; cryptographic and signals-processing products for classified programs; Cobham Ultra retains its radar, sonar, and countermeasures divisions; close Q2 FY2027 (targeting September 2026); double-digit revenue growth and >20% EBITDA margins projected per Booz Allen guidance; a sovereign capability play distinct from the NHI/SaaS consolidation wave	Booz Allen PR · BusinessWire · WashingtonExec · SEC 8-K
Jun 22	Cisco	WideField Security	Undisclosed	Identity-lifecycle security to extend Splunk's Agentic SOC (identity, credentials, sessions, blast radius)	SecurityWeek
Jun 22	F5	SurePath AI	Undisclosed	Denver-based shadow AI detection and discovery startup (~19 employees, ~$6M raised); powers F5's AI Security Platform with network-based AI discovery identifying AI usage across the enterprise including shadow AI without requiring direct application integrations; 88% of organisations report AI-related security challenges per F5's 2026 State of Application Strategy Report; extends F5's application delivery portfolio into the AI governance and shadow-AI security layer	F5 PR · Help Net Security · GeekWire
Jun 18	Accenture	Dragos (majority) + runZero + NetRise	~$4.17B (Dragos valued $3.25B)	Move from OT services into OT security software; Dragos stays standalone, runZero (asset discovery/exposure) + NetRise (firmware/supply-chain) fold under it. ~$208M ARR, +53% YoY. Close Aug–Sep 2026	SecurityWeek · Industrial Cyber
Jun 18	Group 11, Bicycle Capital, Bain Capital Ventures (+ others)	Dream (funding round — Series C)	$260M ($3B valuation)	Sovereign AI and national cyber defense platform for governments; three products: Sphere (CNI/nation-state threat defense), Hero (AI-powered autonomous vulnerability hunting), Atlas (national data/intelligence integration); $130M+ ARR; serving 6 governments; co-founded by Shalev Hulio (former CEO, NSO Group), Sebastian Kurz (former Austrian PM), and Gil Dolev; HQ Tel Aviv with offices in Vienna and Abu Dhabi; positioned as sovereign alternative to US/Chinese hyperscaler AI dependency	SecurityWeek · PR Newswire · Times of Israel
Jun 16	Databricks	Panther	Undisclosed	AI SOC / agentic detection platform; Panther built a security lakehouse-native SIEM enabling real-time threat detection at Databricks scale; integrates with Lakewatch (Databricks' agentic SIEM, launched Mar 2026 via Antimatter+SiftD.ai acquisitions); positions Databricks as a full-stack security analytics vendor — from data ingestion to detection engineering to AI-agent investigation; extends the "security lakehouse" model to disrupt legacy SIEM	Databricks PR · Infosecurity Magazine
Jun 16	Francisco Partners	EfficientIP	Undisclosed (buyout from existing shareholders incl. founders, TempoCap, Jolt Capital; management reinvests)	PE buyout of the Paris-based DDI (DNS/DHCP/IPAM) and DNS-security vendor (~1,500 customers, ~220 staff) to build out Francisco Partners' infrastructure-security portfolio; CEO Norman Girard continues.	BusinessWire · Paul Hastings
Jun 15	SailPoint	Entro Security	~$200M est.	Israeli NHI / AI-agent identity security startup (Tel Aviv; $24M raised seed+Series A; covers 1,000+ NHI/agent types, 1,200+ credential types across 70+ enterprise sources; proprietary NHIDR — non-human identity detection and response for behavioral anomaly monitoring of AI agents and machine identities in real time); integrates into SailPoint Agentic Fabric to expand coverage across the full identity ecosystem from human to non-human to AI agent; closed June 29, 2026 — one of the fastest close timelines of the year	SailPoint PR · GlobeNewswire close · SiliconANGLE · SC Media
Jun 15	1Password	Apono	$250M–$300M (est.)	Israeli just-in-time privileged access management startup (80 staff, ~50 in Israel); dynamically grants and auto-revokes temporary narrowly scoped permissions for humans, machines, and AI agents at the moment of need — eliminates standing accounts and persistent privileges; positions 1Password as the "control plane" for access governance in the agentic workforce, extending from credential management into behavioral-access monitoring; 1Password PR states "over $200M," Calcalist reports $250M–$300M	1Password PR · SecurityWeek · CTech
Jun 15	A10 Networks	TrojAI	Undisclosed (A10 says not material to fiscal 2026 results)	A10 acquires the Canadian AI-security startup (AI red-teaming, runtime protection, governance for AI apps/agentic workflows) to expand its AI security roadmap across deployment models.	A10 Networks · BusinessWire
Jun 9	Rubrik	Strata (Strata Identity)	Undisclosed	Rubrik buys the identity-orchestration vendor to power a new 'Identity Continuity' capability (automatic failover to a secondary identity provider when the primary IdP is compromised/down), alongside an in-house 'Identity Roll Forward' AD-recovery feature; part of Rubrik's identity-resilience push. Announced at Rubrik FORWARD, Las Vegas.	Rubrik Newsroom · BusinessWire
Jun 9	Axiom GRC	MHM	Undisclosed (one secondary tracker cites an unconfirmed ~$250M figure, not corroborated by primary sources)	Inflexion-backed Axiom GRC's first move into Canada, acquiring the Calgary-based cyber-audit/assurance firm (SOC 1, SOC 2, ISO 27001, ISO 42001 -- first Canadian org accredited for ISO 42001 AI-governance assurance); Axiom's 7th deal since Inflexion backing, following IS Partners (2025) and AssurancePoint (Jan 2026).	GRC Report · IS Partners
Jun 1	Dragos	Phosphorus	Undisclosed	xIoT/xOT security specialist (Nashville; ~$65M total funding, $38M round 2022); adds asset discovery, vulnerability management, and threat detection for billions of connected devices embedded in critical infrastructure (IIoT, medical IoT, smart-building, building automation); extends Dragos Platform's TAM to $50B+	Dragos PR · BusinessWire · SecurityWeek

May 2026

SecurityWeek: 26 deals announced in May 2026.

Date	Buyer	Target(s)	Value	Rationale	Source
May 27	Snowflake	Natoma	Undisclosed	Enterprise Model Context Protocol (MCP) gateway governing what AI agents can access across enterprise apps with tool-call-level audit logging, folding into Snowflake Intelligence/Cortex Agents/Cortex Code as part of an agentic control-plane strategy.	Business Wire
May 26	Paessler AG	UVnetworks	Undisclosed	German IT/OT monitoring vendor (PRTG Network Monitor) acquires UVnetworks (maker of UVexplorer/UVexplorer Server — automated network topology discovery, inventory, and configuration backup); UVexplorer integrates as a native PRTG plugin, closing the gap between monitoring and network-context visibility for incident response; extends Paessler's TAM into network operations and OT security monitoring beyond its traditional IT heartbeat/SNMP roots	PR Newswire · ChannelE2E · Paessler PR
May 24	Cyera	Genie Security	~$50M	Six-month-old Israeli endpoint data-loss prevention startup; prevents sensitive data leaks from generative AI tools in real time; extends Cyera's DSPM ecosystem to the endpoint; Cyera's fifth acquisition, valued at $9B ($400M Series F)	CTech · Times of Israel · SecurityWeek
May 22	Cycurion	Secuvant	$2.875M	Automated SOC-as-a-Service with AI-driven threat detection and response; complements HavenX platform ($875K cash + 888,888 preferred shares; close within 7–10 days)	GlobeNewswire · SecurityWeek
May 21	Zscaler	Symmetry Systems	Undisclosed	Identity-mapping and data-access security for AI agents; Symmetry's "Access Graph" maps every human and non-human identity interaction across an enterprise, integrating with Zscaler Zero Trust Exchange to govern AI agent-to-agent communication at scale; fills a critical visibility gap as AI agents multiply service-account proliferation	Zscaler PR · Nasdaq/IR · StockTitan/8-K
May 21	Cranium AI	Aiceberg	Undisclosed	Merges Cranium's AI security/governance framework with Aiceberg's agentic-AI risk-mapping tech into one end-to-end AI-lifecycle security platform; Aiceberg CEO Alex Schlager becomes Cranium's CTO.	Pulse.bot
May 19	Check Point	Deepchecks	~$15M	Israeli AI evaluation startup — team + IP acqui-hire; LLM evaluation and continuous monitoring integrated into Check Point's Agentic Network Security Orchestration platform; Check Point's fourth Israeli acquisition in 2026 (after Cyclops, Cyata, Rotate)	CTech · Security Boulevard · BankInfoSecurity
May 19	Eurazeo	Nextron Systems	Undisclosed (majority stake)	Eurazeo's Elevate fund takes a majority stake in Frankfurt-founded APT-detection/forensic-analysis and compromise-assessment vendor Nextron Systems (550+ clients, 25+ countries) on rising European demand for compromise-assessment tooling in regulated sectors. Catch-up record found via this run's PE-newsroom sweep family.	Eurazeo · Nextron Systems
May 18	Torq	Jit	~$70M est.	AI context-graph firm; adds org-specific context to Torq's AI SOC platform for agentic investigations; ~30-person team joins Torq; deal not officially disclosed but estimated at ~$70M across multiple Israeli tech sources	CTech · BusinessWire · BankInfoSecurity
May 14	Akamai	LayerX	$205M	Browser-based AI usage control / secure enterprise browser; workforce-security strategy. Closed July 2, 2026.	SecurityWeek · Help Net · GlobeNewswire close
May 14	SecurityScorecard	Driftnet	Undisclosed	Internet-scanning / next-gen threat intel engine into the TITAN AI platform for third-party-risk	SecurityScorecard · SiliconANGLE
May 12	AYCE Capital	Kernel Advisory	Undisclosed	MSP-platform roll-up AYCE Capital acquires Kernel Advisory, a cybersecurity advisory firm serving PE funds' cyber M&A due diligence plus vCISO/managed-security/IR work, anchoring a cybersecurity center of excellence across AYCE's North American, UK and European MSP portfolio.	GlobeNewswire · Dealroom
May 7	Cycurion	Halo Privacy + HavenX	Undisclosed	Secure communications + forensic attribution; government-grade privacy and active-defense stack atop Cycurion's existing cybersecurity services; close targeted end of June 2026 (NASDAQ: CYCU)	GlobeNewswire · SecurityWeek
May 6	WatchGuard	Perimeters.io	Undisclosed	Cloud Application Security SaaS for MSPs (founded 2022; ~30 staff, Wilmington DE; scans SaaS environments for misconfigurations across 40+ apps including M365, Salesforce, and OpenAI); simultaneous launch of WatchGuard CloudDR (Cloud Detection and Response) — continuous visibility, detection, and automated response for MSP multi-tenant cloud environments	WatchGuard PR · GlobeNewswire · BankInfoSecurity
May 6	Boost Security	SecureIQx + Korbit.ai	Undisclosed	Adds SecureIQx's multi-language reachability/SCA analysis and Korbit.ai's AI-driven pull-request security review to Boost's AI-native SDLC Defense Platform; bundled with a separate $4M funding raise.	SiliconANGLE
May 4	Cisco	Astrix Security	~$400M	Israeli NHI (non-human identity) security startup — API keys, service accounts, OAuth tokens, AI agent credentials; integrates into Cisco's identity security layer for the agentic workforce; Cisco's largest Israeli acquisition since 2024	Cisco Blogs · SecurityWeek · CTech
May 1	Datavault AI (NASDAQ: DVLT)	CyberCatch (TSXV: CYBE)	~CAD $136.8M (~USD $100M) all-stock	AI-enabled cyber risk mitigation and quantum-resistant security integration; CyberCatch's SaaS platform proactively discovers and remediates cyber risks in real time; acqui-hire + tech play to embed PQC into Datavault's SanQtum-secured edge ecosystem; CyberCatch valued at ~CAD $5.11/share (2.2× market premium); CyberCatch operates as Datavault subsidiary with founder Sai Huda as president	FinanceWire · Seeking Alpha · AccessNewswire

April 2026

Date	Buyer	Target(s)	Value	Rationale	Source
Apr 30	Everfield Germany	Rhebo (sold by Landis+Gyr)	High single-digit M USD	OT/IIoT network anomaly-detection software (Leipzig, est. 2014; part of Landis+Gyr since 2021); Everfield expands its OT software vertical in DACH markets (existing: ondeso OT management); Landis+Gyr exits to refocus on core energy-metering business	Landis+Gyr PR · Industrial Cyber
Apr 30	Palo Alto Networks	Portkey	$120–140M est.	AI Gateway startup — centralised control plane to manage, route, and secure AI agent-to-agent and app-to-model traffic (processes trillions of tokens/month); integrates into Prisma AIRS to govern agentic AI at low-latency scale; close expected fiscal Q4 2026	Palo Alto Networks PR · GuruFocus · Pulse2 · CTech
Apr 28	Silverfort	Fabrix Security	Undisclosed (est. tens of millions)	Israeli AI-native identity security startup (Tel Aviv); adds autonomous runtime identity protection — monitors and secures identity behaviors in real time, detecting anomalous service-account, machine-identity, and AI-agent activity across hybrid and multi-cloud environments; extends Silverfort's unified identity protection platform with AI-driven detection and response for the agentic workforce era	PR Newswire
Apr 28	Socket	Secure Annex	Undisclosed	Browser and editor extension security startup (John Tuckner, founder); extends Socket's open-source supply-chain security platform beyond npm/PyPI packages into browser extensions (Chrome/Edge), VS Code extensions, MCP servers, and AI skills — closing a high-risk visibility gap where attackers embed malicious code in developer tooling; customers include Reddit, Brave, Torq, and Movable Ink; Socket now protects 14,000+ orgs and 1.2M code repositories	Socket Blog · BankInfoSecurity · EINPresswire
Apr 28	Spin.AI	Revyz	Undisclosed	Atlassian Jira/Confluence backup and SSPM specialist (Atlassian Gold Marketplace Partner); extends Spin.AI's data resiliency and security posture management platform to the Atlassian ecosystem alongside Google Workspace, Microsoft 365, and Salesforce; combined platform covers automated backup, configuration drift detection, sandbox-to-production workflows, ransomware protection, eDiscovery, DLP, and SSPM across six SaaS platforms	Spin.AI PR · Newsfile · Seeking Alpha
Apr 27	Integris	First Focus	Undisclosed	Cranbury, NJ-based MSP Integris makes its first international acquisition, buying First Focus (~400 staff, 800+ clients across Australia, New Zealand and the Philippines, offering managed IT, cybersecurity and AI services); combined group becomes a ~1,200-employee SMB-focused MSP. April 2026 M&A-backfill enrichment.	PR Newswire
Apr 27	Bridgepoint	iC Consult Group	Undisclosed (media estimate €400-450M)	Carlyle fully exits its stake in iC Consult, the world's largest independent IAM/identity-security consulting and managed-services provider; founder-CEO and management roll over. Catch-up record: entirely absent from the tracker, found via this run's PE-newsroom sweep family.	Bridgepoint · Carlyle
Apr 23	Cyera	Ryft	Undisclosed (~$100–130M est.)	AI-agent data lake security (est. 2024, backed by Index Ventures / Bessemer; open-standard data lake with automated governance, compliance, DR); builds unified control plane for AI agent data access; Cyera's fourth acquisition, valued at $9B post $400M Series F	Cyera PR · SiliconANGLE
Apr 21	TekStream	ImagineX (cybersecurity division)	Undisclosed	Atlanta-based digital transformation firm acquires ImagineX's cybersecurity practice (Cyber Strategy & Advisory, vCISO, GRC, CTEM, IAM); positions TekStream as an end-to-end digital resilience provider from board-level strategy through SOC operations	PR Newswire · BankInfoSecurity
Apr 21	Airbus	Quarkslab	Undisclosed	French cybersecurity firm (~100 staff, Paris/Rennes; QShield protects software against AI-driven reverse engineering and adversarial threats); adds sovereign EU cyber R&D to Airbus Defence and Space's pan-European portfolio (alongside Infodas/DE, Ultra Cyber/UK); backed by Tikehau Capital since 2020	Airbus PR · GovInfoSecurity
Apr 21	Airbus Defence and Space	Quarkslab	Undisclosed	Signs agreement to buy the French (Paris/Rennes, ~100 staff) cybersecurity research firm — reverse-engineering, embedded/IoT security, code protection — to strengthen its standing as a sovereign cyber partner for French authorities; closed Oct 1, 2026 after regulatory approval.	Airbus · ThreatCluster
Apr 11	Fortreum	Kovr.AI	Undisclosed	FedRAMP-authorized AI-native compliance automation platform; adds AI-driven compliance readiness, audit preparation, and evidence-collection automation to Fortreum's federal cybersecurity and cloud consulting practice; Fortreum specialises in FedRAMP assessments and federal cloud security	BusinessWire
Apr 9	Cisco	Galileo Technologies	Undisclosed	AI agent observability and evaluation platform; extends Splunk Observability Cloud with agent tracing, quality evaluation, and production AI guardrails; closed May 22, 2026	NetworkWorld · ChannelE2E · Futurum Group
Apr 8	Virtual IT Group (VITG)	Security Centric	Undisclosed	Australian IT/managed-services provider VITG acquires Security Centric, an Australian cybersecurity consultancy (MDR, GRC and advisory, security engineering, technical assurance), forming a combined ~45-person cybersecurity practice; Security Centric's CEO becomes VITG's CSO. April 2026 M&A-backfill enrichment.	PR Newswire
Apr 2	Fortra	Zero-Point Security	Undisclosed	UK red-team training firm (est. 2018; Red Team Ops I & II courses, hands-on adversary emulation and penetration testing); Fortra's 21st acquisition — expands Cobalt Strike / Core Impact / Outflank offensive portfolio with specialized training and purple-team capability	Fortra PR · Security Today

March 2026

Date	Buyer	Target(s)	Value	Rationale	Source
Mar 26	Rapid7	Kenzo Security	Undisclosed	Agentic AI platform for autonomous SOC investigations and preemptive threat detection; no material ARR/profitability impact per Rapid7	Rapid7 IR · SecurityWeek
Mar 24	Ekinops	Chimere	Undisclosed	French universal ZTNA startup (Paris); Chimere's agent-agnostic ZTNA platform securely interconnects all endpoints with all enterprise resources regardless of OS, device type, or location; positions Ekinops as the sole European single-vendor SASE company globally (combining existing Olfeo SWG/May 2025 and new Chimere ZTNA); transaction completed before March 31, 2026	Ekinops PR · PRNewswire · Morningstar
Mar 24	Databricks	Antimatter + SiftD.ai	Undisclosed	Powers Lakewatch, Databricks' new open agentic SIEM; Antimatter adds AI-agent authentication/authorization (Berkeley researchers); SiftD.ai adds SPL-originated large-scale detection engineering (Splunk founders)	Databricks PR · TechCrunch · SiliconANGLE
Mar 24	Epiq	LitLingo	Undisclosed	Legal/eDiscovery services firm acquires Austin-based LitLingo, an AI platform that monitors high-risk employee communications in real time, folding it into Epiq Service Cloud's compliance/investigations/risk-management line -- March 2026 backfill	Epiq · eDiscovery Today
Mar 24	DeleteMe	Block Party	Undisclosed	Data-broker/personal-data-removal service acquires Block Party (founder Tracy Chou's social-media privacy/deep-clean tool across TikTok, Instagram, Facebook, Venmo, X), combining data-broker removal with social-media exposure management under one consumer privacy product -- March 2026 backfill	TechCrunch · Homebrew
Mar 23	Airbus Defence and Space	Ultra Cyber Ltd	Undisclosed	UK sovereign cybersecurity firm (200+ staff, Maidenhead cyber centre of excellence); cryptography and data security for UK MoD programs + specialised airborne datalinks capability; joins Airbus' Connected Intelligence business unit alongside prior acquisitions Quarkslab (FR, Apr 2026) and Infodas (DE); closes H2 2026 subject to regulatory approval; seller: Cobham Ultra (Advent International portfolio)	Airbus PR · Advent International · SecurityWeek
Mar 19	AppViewX	Eos	Undisclosed	AI-native Identity Control Plane for AI agents and autonomous workloads; AppViewX (CLM/PKI automation) acquires Eos (agentic governance + privileged access control for AI agents and machine identities in cloud and hybrid environments); integrates into AppViewX platform to deliver end-to-end machine and AI agent identity security; Eos co-founders become AppViewX CEO + CTO	AppViewX PR/GlobeNewswire · Help Net Security
Mar 19	Infotrust	Catalyst Cyber	~AUD $5M (~$3.5M cash + $1.5M shares, uncapped earn-out)	Canberra-based federal-government cyber assurance/advisory/compliance consultancy (~20 staff, founder George Katavic); secures Infotrust (ASX: ITS) immediate access to high-barrier Australian federal cyber security contracts and strengthens its sovereign-provider positioning	Infotrust PR · SecurityBrief · CRN Australia
Mar 19	Sterling Investment Partners	Cyber Advisors	Undisclosed	Greenwich, CT PE firm acquires Cyber Advisors (Maple Grove, MN; 330+ staff, 1,800+ customers; managed IT/cybersecurity services and consulting) from prior PE owner Goldner Hawn, backing next-stage growth -- March 2026 backfill	Sterling Investment Partners · Pulse2
Mar 11	Leonardo	Becrypt	Undisclosed	Italian aerospace, defense, and security multinational acquires UK-based data-protection and secure-mobile cybersecurity firm (encryption, secure OS, government-grade device security; founded 1996, ~100 specialists, London); expands Leonardo's cybersecurity footprint into UK sovereign/government markets; deal subject to regulatory approval, expected to close Q2 2026	https://ukdefencejournal.org.uk/leonardo-to-acquire-uk-cyber-firm-becrypt/ · https://www.becrypt.com/becrypt-joins-forces-with-leonardo-to-expand-global-cyber-security-reach/
Mar 10	Accel, GV, Kleiner Perkins, Menlo Ventures, 8VC, Ballistic Ventures, In-Q-Tel (+ others)	Armadin (funding round — combined seed + Series A)	$189.9M	Autonomous AI cybersecurity agent startup founded by Kevin Mandia (former Mandiant CEO / Google Cloud cybersecurity chief) in September 2025; Armadin creates AI agents that autonomously scan for threats and conduct red-teaming without human intervention; 60+ employees at launch; working with Fortune 100 companies; combined seed + Series A is reportedly a record for a security startup at that stage; Accel leads, with GV (Google Ventures), Kleiner Perkins, Menlo Ventures, 8VC, Ballistic Ventures (Mandia co-founded), and In-Q-Tel (CIA) participating	SecurityWeek · TechCrunch · CNBC · GovInfoSecurity
Mar 9	OpenAI	Promptfoo	Undisclosed (last valued ~$86M, Jul 2025)	Agentic AI security testing; integrates into OpenAI's Frontier platform to identify and remediate AI-system vulnerabilities during development	OpenAI · SecurityWeek · TechCrunch
Mar 3	Giesecke+Devrient (G+D) / Veridos	XTec	Undisclosed	US federal-grade identity, authentication, and access management specialist (FedRAMP High authorized — the only ICAM ecosystem certified at this level; long-standing relationships with 105+ US federal agencies; cryptographic tokens and smart access systems for government and regulated enterprises); integrated into Veridos (G+D's joint venture with Bundesdruckerei, the German federal government ID technology group); closed February 27, 2026, announced March 3; expands G+D's Digital Security Segment and Veridos' federal credentialing footprint	G+D PR · GlobeNewswire · Biometric Update
Mar 2	Quantum eMotion	SKV Technology Inc.	Undisclosed	Canadian quantum-resistant security firm acquires SKV Technology (Ottawa; hardware security modules and post-quantum cryptography integration); expands Quantum eMotion's quantum-safe product portfolio for financial services and critical infrastructure; closed March 2, 2026	Quantum eMotion PR · SEC Filing
Mar 2	Zurich Insurance	Beazley	$10.9B (~£8.1B)	Specialty insurer (cyber, marine, aviation, space, fine art); Beazley is one of the world's largest cyber insurers with Full Spectrum Cyber offering combining coverage + in-house IR + proactive security services; combined ~$15B specialty GWP; close H2 2026 subject to regulatory approval	Zurich PR · Insurance Journal

February 2026

Date	Buyer	Target(s)	Value	Rationale	Source
Feb 27	Quantum eMotion	Jet Lab Technologies (SecureKey platform)	Up to $15M (royalties over 5 years)	QeM acquired Jet Lab's SecureKey cryptographic-software platform to combine it with its QRNG-powered Sentry-Q layer, creating a full-stack quantum-resilient security architecture spanning cloud, network, endpoint, and chip; distinct from QeM's concurrent March acquisition of SKV Technology hardware security modules	GlobeNewswire
Feb 23	Experian	AtData	Undisclosed	Email identity intelligence specialist (world's most comprehensive email insights technology; 10B+ email addresses globally; 98% coverage of active North American email addresses; real-time signals on validity, deliverability, fraud risk, identity linkage); Experian integrates AtData into its identity and fraud decisioning platforms to close gaps in email-based authentication and fraud prevention; Experian's first acquisition in 16+ years	Experian PR · Finovate · RegTech Analyst
Feb 18	Palo Alto Networks	Koi	~$400M est.	Agentic endpoint security startup (secures unvetted browser extensions, AI tools, and developer add-ons that employees install — the "last mile" of the modern attack surface); technology folds into Cortex XDR and Prisma AIRS to govern AI agent-level endpoint risk; closed April 14, 2026	Palo Alto Networks PR · KuppingerCole · Futurum Group
Feb 17	Booz Allen Hamilton	Defy Security	Undisclosed	Cyber services and consulting firm; expands Booz Allen's global commercial business into UK/EU financial services, health/life sciences, manufacturing, and energy markets	Booz Allen PR · SecurityWeek
Feb 17	ITC Secure + IronNet (merger)	Collective Defence (new co.)	Undisclosed	UK-headquartered ITC Secure (30+ years managed security / SOC operations) merged with IronNet's collective-defense network-detection platform to form Collective Defence — a Luxembourg-domiciled critical-infrastructure protection company targeting state-sponsored hybrid-warfare threats; combined entity serves CNI operators across financial services, energy, and government	BusinessWire
Feb 12	Proofpoint	Acuvity	Undisclosed	AI enterprise security and governance startup (founded 2023, 24 staff, $9M seed Foundation Capital; emerged from stealth Sep 2024); delivers visibility, governance, and runtime protection across the full AI/agent-driven workspace — from browser endpoints and MCP servers to locally installed models; enables Proofpoint to govern shadow AI usage, prevent sensitive data exposure to GenAI services, and defend against prompt injection and model-manipulation attacks; extends the human-centric security platform into the agentic workforce era	Proofpoint PR · Help Net Security · CyberScoop
Feb 12	Check Point	Cyata + Cyclops Security + Rotate	~$150M total (~$85M to Cyclops)	Three Israeli startups acquired simultaneously to build an end-to-end AI security platform: Cyata (AI agent identity management — discover active agents, map permissions, monitor behavior, enforce policy; founded 2024); Cyclops (internal asset discovery + continuous threat exposure management — integrates with 150+ systems across SaaS, cloud, on-premises, IoT/OT, endpoints and workloads); Rotate (unified MSP management and scalability for mid-market customers); Check Point's fourth through sixth Israeli acquisitions in 2026	Check Point PR · CTech · BankInfoSecurity · SC Media
Feb 11	Palo Alto Networks	CyberArk	$25B	Bring identity security into the core platform; largest pure-play cyber deal of 2026	Verdict
Feb 11	Cellebrite	SCG Canada, Inc.	Undisclosed	Drone/UAV digital forensics leader; access to data from 80+ UAV types (flight logs, video, cell tower data, telemetry); extends Cellebrite's AI platform for law enforcement, defense, and intelligence customers; closed March 2, 2026	Cellebrite PR · Newswire.ca
Feb 11	Endor Labs	Autonomous Plane	Undisclosed	Cloud-native AppSec startup (founded by Kyle Quest, creator of DockerSlim); adds full-stack reachability from code to container — SCA findings correlated with container image vulnerabilities, runtime profiling to identify genuinely exploitable vulns; eliminates up to 90% of false positives typical of conventional scanners; extends Endor Labs' AI-native application security platform	Endor Labs PR · fintech.global
Feb 10	Sophos	Arco Cyber	Undisclosed	UK-based cybersecurity assurance company (~30 staff; specialist in controls optimization and governance automation); Sophos integrates Arco's capabilities into its CISO Advantage offering, delivering AI-powered cybersecurity governance to organisations that lack dedicated security leadership — one of the only MDR vendors to bundle CISO-level advisory at scale	Sophos PR · GlobeNewswire · SecurityWeek
Feb 5	Zscaler	SquareX	Undisclosed	Browser security / zero trust for the AI era; extends Zscaler's inline proxy architecture into the browser layer for AI-agent traffic and data controls	Zscaler IR · SecurityWeek
Feb 3	Varonis	AllTrue.ai	$150M	AI trust, risk, and security management (TRiSM); enables Varonis customers to monitor and govern AI agent behavior and reduce AI-introduced data risks	GlobeNewswire · SecurityWeek
Feb 3	Logicalis US	Maple Woods Enterprises	Undisclosed	Managed security services provider; adds Maple Woods' "Overwatch" cybersecurity and compliance program (built to federal/regulated-sector standards) to Logicalis's services framework, expanding into healthcare and SLED (state, local, education) markets	PR Newswire
Feb (TBD)	Arctic Wolf	Sevco Security	Undisclosed	Attack surface management (ASM) into Arctic Wolf's managed SOC platform; improves asset inventory and exposure visibility for managed detection customers	SecurityWeek

January 2026

Date	Buyer	Target(s)	Value	Rationale	Source
Jan 29	Palo Alto Networks	Chronosphere	$3.35B	Cloud-native observability for AI-era data volumes; visibility/security at scale	CTech
Jan 27	LevelBlue	Alert Logic MDR (from Fortra)	Undisclosed	MSSP consolidation: LevelBlue acquires Fortra's Alert Logic managed detection and response (MDR), extended detection and response (XDR), and web application firewall (WAF) services business; Fortra transitions to a technology partner; extends LevelBlue's managed security services portfolio and customer base in the SMB and mid-market segments	CyberScoop · LevelBlue PR
Jan 26	Radware	Pynt	Undisclosed	Israeli API security testing startup; adds automated pre-production API security testing + dynamic vulnerability discovery to Radware's API portfolio; extends protection across the full API lifecycle from design through runtime; acquired at close (not just announced)	GlobeNewswire/Security Solutions Media · SecurityWeek
Jan 26	OVHcloud	Seald	Undisclosed	French E2E encryption startup with ANSSI CSPN security visa; zero-knowledge model encrypts data client-side before upload — neither host nor admin can access plaintext; Seald SDK natively integrated into OVHcloud's Secret Manager, KMS, and HSM catalogue; sovereign European cloud data-protection play	OVHcloud PR · Channel Web · SecurityWeek
Jan 26	Horizon Capital	Threatscape	Undisclosed (majority-stake growth investment, Horizon's 4th from Fund III)	UK PE firm backs Threatscape (Dublin-based cybersecurity services specialist, UK/Ireland footprint) to fund organic growth, a buy-and-build M&A strategy and IP investment, with planned expansion into Europe/North America -- January 2026 backfill	Horizon Capital · TechCentral.ie
Jan 20	FGS Global	Memetica	Undisclosed	KKR-backed strategic-communications firm acquires threat-intel/digital-risk consultancy Memetica (AI-driven detection of coordinated hostile activity across social, dark-web and fringe platforms) and launches a new AI Advisory practice around it; Memetica was long an FGS partner before the buyout -- January 2026 backfill	FGS Global · Business Wire
Jan 15	Delinea	StrongDM	Undisclosed	PAM leader acquires JIT runtime authorization and universal access management (infrastructure, databases, AI agents); eliminates standing credentials in favour of access granted at the moment of action; closed March 5, 2026	Delinea PR · MSSP Alert
Jan 15	Parsons Corporation	Altamira Technologies (from ClearSky)	~$385M ($340M base + $45M earn-out)	National security IT and cybersecurity services firm (McLean, VA; 600+ employees, 90%+ clearance-holders); delivers advanced analytics, SIGINT, cyber, missile warning, and space capabilities; adds to Parsons' Defence & Intelligence unit; closed January 15, 2026	Parsons IR · GlobeNewswire · SecurityWeek
Jan 14	Infoblox	Axur	Undisclosed	AI-powered external threat discovery and digital risk protection; adds brand-abuse, credential-exposure, and phishing takedown capabilities (40M+ URLs/day scanned); closes May 5, 2026	Infoblox PR · BankInfoSecurity
Jan 14	Diligent	3rdRisk	Undisclosed	Adds AI-native third-party/vendor risk management (automated due diligence, continuous monitoring) to Diligent's GRC platform	Corporate Compliance Insights
Jan 13	CrowdStrike	Seraphic Security	~$420M	Israeli browser runtime security firm; decouples security from the browser itself — enforces policy within Chrome, Edge, Safari, Firefox, and agentic browsers on managed and unmanaged devices alike; turns any browser into a secure enterprise browser without forced migration; closes Q1 FY27	CrowdStrike PR · CTech · CyberScoop
Jan 12	OneSpan	Build38	Undisclosed	Mobile app protection SDK spinoff from Giesecke+Devrient; adds client-side on-device app-shielding, runtime application self-protection (RASP), and SDK hardening to OneSpan's identity verification and e-signature portfolio; closed March 2, 2026	OneSpan IR · SEC 8-K
Jan 12	Sole Source Capital	Brite	Undisclosed	PE firm's first platform deal from Fund III -- acquires Brite (Victor, NY, est. 1983), a cybersecurity and managed-IT-services provider serving finance/healthcare/insurance/education/public-safety clients -- explicit buy-and-build base in a fragmented MSSP market; CEO/President retained -- January 2026 backfill	Business Wire · MSSP Alert
Jan 8	ThreatModeler	IriusRisk	$100M+	Spain-based threat modeling platform (Paladin Capital-backed); unites the top two enterprise threat modeling platforms; $50M combined ARR; positions for AI-era design-time security in the application security market; deal closed end-2025, announced Jan 8	Fortune · PRNewswire · ThreatModeler PR
Jan 8	CrowdStrike	SGNL	$740M	Continuous identity and dynamic authorization startup; grants/revokes access for human, non-human (NHI), and AI agent identities in real time based on contextual risk — eliminates standing privileges; integrates into Falcon Identity Protection; closes Q1 FY27	CrowdStrike PR · The Register
Jan 8	JumpCloud	MacSolution	Undisclosed	Brazil's largest JumpCloud MSP (São Paulo); acqui-hire to build a LatAm GTM hub for JumpCloud's open directory/identity platform; expands JumpCloud's presence in the largest enterprise IT market in South America	JumpCloud PR · SiliconANGLE
Jan 7	Gryphon Investors	Fortreum	Undisclosed	PE firm takes majority growth stake in Fortreum (Lansdowne, VA) -- cybersecurity compliance/audit/technical-testing (FedRAMP, CMMC, ISO, PCI, SOC) -- to fund expansion of its XRAMP continuous-validation platform; founders retain significant equity -- January 2026 backfill	Gryphon Investors · PE Professional