Cybersecurity Acquisitions in United States

Logicalis US has acquired Maple Woods Enterprises, a long-time security partner, to deepen its managed security capabilities and strengthen its Overwatch cybersecurity and compliance program. The deal integrates Maple Woods’ team and expertise into Logicalis’ managed services organization to improve scale, consistency, and technical depth, expanding Overwatch’s reach across additional regulated verticals.

Proofpoint, Inc. acquired Acuvity, an AI enterprise security and governance company, to expand Proofpoint’s AI-native visibility, governance, and runtime protection for AI and agent-driven workflows. The deal is positioned to strengthen Proofpoint’s platform for securing the “agentic workspace,” addressing risks such as shadow AI, sensitive data exposure, IP loss, regulatory violations, and AI-specific attacks like prompt injection and model manipulation.

Woven Solutions, a Reston, Virginia-based provider of AI-enabled mission software for national security customers, acquired Apira Technologies. Apira develops patent-pending software tools for sensitive cyber and information operations and provides SaaS products and specialized technical services spanning computer vision, machine learning, AI-enabled content creation, synthetic media detection, and secure digital engagement. The deal is Woven’s second acquisition since receiving a strategic investment from Falfurrias Management Partners in August 2025.

Semperis, an identity-driven cyber resilience and crisis management company, has acquired MightyID, an identity resilience specialist for cloud identity providers Okta and Ping. The deal expands Semperis’ identity protection and recovery capabilities across hybrid and multi-cloud identity environments, including Active Directory and Entra ID.

Francisco Partners completed the take-private acquisition of Jamf for $13.05 per share in cash, implying an enterprise value of approximately $2.2 billion. Following shareholder approval on January 8, 2026, Jamf was delisted from NASDAQ and will continue operating as a privately held company focused on Apple device management and security.

LevelBlue entered a strategic managed services partnership with Fortra that includes LevelBlue’s acquisition of Fortra’s Alert Logic Managed Detection and Response (MDR) managed services business. The acquisition covers the managed services for Alert Logic’s MDR, Extended Detection and Response (XDR), and Web Application Firewall (WAF) solutions, expanding LevelBlue’s global MDR platform and giving Alert Logic customers access to a larger footprint and broader threat telemetry. As part of the broader agreement, Fortra will become a leading technology partner to LevelBlue, making Fortra’s cybersecurity software portfolio available to LevelBlue’s global client base.

Mitsubishi Electric Corporation has completed the acquisition of all outstanding shares of Nozomi Networks Inc., making it a wholly owned subsidiary. Nozomi Networks will continue to operate independently while delivering vendor-agnostic OT/IoT cybersecurity solutions, following the deal originally announced on September 9, 2025.

Radware has completed the acquisition of Pynt, an API security testing company, to expand its API security capabilities into pre-production testing. The deal is intended to strengthen Radware’s full-lifecycle API security offering by combining Pynt’s testing with Radware’s API discovery, posture management, business logic protection, and runtime defenses. Pynt’s technology will remain available as a standalone product and integrated into Radware’s broader portfolio, and key Pynt employees (including its founders) joined Radware following close.

Usercentrics, a global provider of privacy-led marketing and data privacy technology, acquired MCP Manager, a governance platform for the Model Context Protocol (MCP). The deal extends Usercentrics’ consent, preference, and data-governance capabilities into AI-driven workflows and AI agents to improve oversight, auditability, and compliance (including readiness for the EU AI Act). Financial terms were not disclosed.

Sole Source Capital LLC acquired Brite, a Victor, New York-based provider of cybersecurity and IT managed services and technology solutions. The deal is Sole Source Capital’s first platform investment from SSC Partners Fund III and is intended to serve as a foundation for a buy-and-build strategy in the fragmented cybersecurity managed services market. Financial terms were not disclosed, and Brite’s leadership team including CEO Justin Smith and President Trevor Smith will remain in place.

ThreatModeler acquired IriusRisk, combining two enterprise threat-modeling platforms to expand global scale, accelerate product development, and deepen support for security and development teams. The combined business is positioned as creating the industry’s largest proprietary threat-model dataset to help enterprises identify and mitigate application risk across the software development lifecycle. Financial terms were not disclosed; ThreatModeler is majority owned by Invictus Growth Partners, and Paladin Capital Group (a longtime IriusRisk investor) will remain a shareholder.

Gemspring Capital Management announced that an affiliate has acquired TRG, a Cleveland, Ohio-based provider of enterprise mobility lifecycle management and integrated cybersecurity solutions. The transaction was completed in partnership with TRG Founder and CEO Sean Kennedy, with the Kennedy family and TRG’s existing management team retaining a significant ownership stake; financial terms were not disclosed.

Axiom GRC, a London-headquartered governance, risk, and compliance (GRC) platform, acquired AssurancePoint, an Atlanta-based provider of SOC and ISO audit and advisory services for mid-sized organizations. AssurancePoint will integrate with IS Partners, Axiom GRC’s U.S. IT compliance and risk advisory platform, to expand North American audit and assurance capacity and accelerate Axiom’s U.S. cyber compliance growth.

Gryphon Investors completed a majority growth recapitalization of Fortreum, a cybersecurity services firm providing audit, advisory, and technical testing for regulated-industry compliance frameworks (e.g., FedRAMP, CMMC, ISO, PCI, SOC). Fortreum’s management team, including co-founders James Leach and Michael Carter, will retain a significant equity stake, and the investment will support expansion of offerings and acceleration of tech-enabled (including AI) solution development, such as its XRAMP continuous validation platform.

Com Laude, a London-based corporate domain services provider owned by PX3 Partners, completed the acquisition of U.S. corporate domain registrar Markmonitor from Newfold Digital. The businesses will combine under a new entity, Markmonitor Group, with an initial enterprise value of approximately $450 million, expanding capabilities in corporate domain portfolio management, TLD advisory, and related services.

Complete, a managed services provider backed by private equity firm Heritage Holding, acquired Columbia Advisory Group, LLC (CAG). CAG provides cybersecurity, governance, risk & compliance (GRC) as-a-service, and IT services to higher education, state and local government agencies, and mid-market enterprises in the United States.

itSynergy, a provider of IT and cybersecurity services to Registered Investment Advisers (RIAs), acquired the Itegria line of business from Comply. The deal shifts responsibility for the IT and cybersecurity services historically delivered through Itegria to itSynergy, while Comply continues focusing on its regulatory technology and compliance platform.

NuView, a newly formed managed IT and cybersecurity platform backed by RFE Investment Partners and Mansfield Investment Partners, acquired Beyond Secure, an Austin-based managed security and compliance services provider for regulated industries. The deal strengthens NuView’s unified managed IT, cybersecurity, compliance, and advisory platform; financial terms were not disclosed. Viking Mergers & Acquisitions advised on the transaction.

Cyderes, a global managed cybersecurity services provider, announced the acquisition of Lucidum, a security data fabric and entity intelligence platform provider. The deal is intended to create an identity-centric, unified data foundation across Cyderes’ portfolio to enhance IAM, exposure management, MDR investigations, and AI-driven remediation workflows.

No-IP Technologies, LLC, a subsidiary of Indus Growth Fund, completed a strategic majority investment in Vitalwerks Internet Solutions, LLC (dba No-IP), a provider of Dynamic DNS, Managed DNS, and remote access solutions. As part of the transaction and leadership transition, No-IP founder Dan Durrer became Founder and CTO, and Indus Growth Fund founder/managing partner Suchit Rout assumed the role of CEO to support accelerated product development and go-to-market expansion.

Veeam Software completed its $1.725 billion acquisition of Securiti AI. The combination is intended to create a unified “trusted data platform” that brings together data resilience with data security posture management, privacy, governance, and AI trust capabilities. Following the deal, Securiti AI founder and CEO Rehan Jalil joins Veeam as President of Security and AI, and approximately 600 Securiti AI employees will join Veeam.

RKON Technologies, a managed IT and cybersecurity services firm, acquired ScaleSec, a cloud security and consulting company, to strengthen RKON’s secure cloud and multicloud capabilities across environments such as Microsoft Azure, AWS, and Google Cloud. ScaleSec will be fully integrated and operate under the RKON brand; financial terms were not disclosed. ScaleSec was advised by Layer 7 Capital, and Northwest Bank provided funding; ScaleSec had been a portfolio company of Vixul.

Shore Rock Partners acquired a controlling (majority) stake in AMAG Technology, a provider of high-security access control, identity/visitor, and video management solutions. Allied Universal retained a significant minority interest and will continue as a strategic partner, while Carlson Private Capital Partners invested alongside Shore Rock Partners and BellTower Partners to support AMAG’s next phase of growth.

Checkmarx announced the acquisition of Tromzo, a Silicon Valley startup focused on AI-native autonomous security agents for application security. Tromzo’s technology and engineering team—including founders Harshil Parikh and Harshit Chitalia—will join Checkmarx to enhance the Checkmarx One platform and expand the Checkmarx Assist family of agentic AI capabilities beginning in early 2026.

Woven Solutions acquired Cystemic Security to expand its AI-enabled cyber and managed attribution capabilities for U.S. national security and intelligence community customers. The acquisition strengthens Woven’s end-to-end support for cyber missions—adding expertise in cyber forensics, vulnerability analysis, and attribution-controlled environments—and represents Woven’s first deal since receiving a strategic investment from Falfurrias Management Partners in August 2025.

LevelBlue completed its acquisition of Cybereason, expanding its managed detection and response (MDR), extended detection and response (XDR), incident response/DFIR, and cybersecurity consulting capabilities. As part of the transaction, SoftBank Corp., SoftBank Vision Fund 2, and Liberty Strategic Capital became investors in LevelBlue, and Liberty Strategic Capital’s Steven T. Mnuchin joined LevelBlue’s board.

MineOS completed the sale of its consumer privacy business to McAfee. The divestiture allows MineOS to focus fully on its enterprise privacy, risk management, and AI governance platform, while McAfee takes ownership of the consumer-facing privacy product used to help individuals identify and manage personal data exposure online.

Amplix, a technology advisory services provider and a portfolio company of Gemspring Capital, acquired 24By7Security, a cybersecurity consulting and compliance services firm headquartered in Coral Springs, Florida. The deal expands Amplix’s cybersecurity capabilities—adding services such as risk assessments, compliance, virtual CISO, incident response planning, security testing, and managed security operations—and is Amplix’s twelfth acquisition since forming the platform in 2022. Following the acquisition, 24By7Security’s leadership and team will join Amplix and operate under the Amplix brand.

SAFE, a cyber risk quantification and management company, announced it has acquired Balbix, a continuous threat exposure management (CTEM) platform provider. The deal combines Balbix’s AI-native exposure management with SAFE’s cyber risk quantification capabilities to create a unified, agentic-AI cyber risk and exposure management platform.

CyberRisk Alliance (CRA) announced it has acquired ChannelPro Network, a provider of content and events serving the SMB managed service provider (MSP) community. The deal expands CRA’s channel-focused cybersecurity intelligence and marketing solutions portfolio, complementing existing brands including MSSP Alert, MSSP Alert Live, and ChannelE2E.

Meditology Services, a healthcare-focused cybersecurity and compliance consulting firm, acquired CORL Technologies, a provider of third-party risk management (TPRM) services. The deal expands Meditology’s offerings with CORL’s data-driven insights, managed services, and AI-enabled, workflow-driven TPRM solutions to help healthcare organizations address vendor and supply-chain risk through assessments, continuous monitoring, and program optimization.

Hexaware Technologies has acquired CyberSolve, a global specialist in identity and access management (IAM) solutions, to expand its AI-led cybersecurity and identity security capabilities. The combination is aimed at helping enterprises modernize identity foundations, automate governance and controls using AI, and operate securely across complex hybrid technology environments.

Coalition, an Active Insurance provider combining cyber insurance with risk management tools, acquired automated managed detection and response (MDR) provider Wirespeed. The deal adds Wirespeed’s millisecond-speed threat triage and automated MDR capabilities to Coalition’s cyber risk management and insurance platform, including integrations with Coalition’s Active Data Graph. Following the acquisition, Wirespeed CEO Tim MalcomVetter will join Coalition as General Manager, Security, and co-founder/CTO Jake Reynolds will become Head of Engineering for Coalition Security.

Axiom GRC, a London-headquartered governance, risk and compliance (GRC) platform backed by Inflexion, acquired IS Partners, a Philadelphia-based provider of cyber assurance and compliance services. The deal—Axiom’s first U.S.-headquartered acquisition—expands Axiom’s North American presence and strengthens its audit, attestation, and compliance capabilities across frameworks such as SOC 1/2, ISO 27001, HITRUST, HIPAA, PCI DSS, and CMMC.

MorganFranklin Cyber, a cybersecurity advisory, consulting, and managed services firm backed by MC Partners, announced the acquisition of Lynx Technology Partners, a provider of cybersecurity and risk management services. The deal is intended to expand MorganFranklin Cyber’s capabilities, strengthen business development, and deepen its reach across key markets. As part of the transaction, Lynx founder and chairman Aric K. Perminter will join MorganFranklin Cyber as Managing Director, Client Relations.

Avery Products Corporation, a division of CCL Industries Inc., acquired IDESCO Corp., a New York-based provider of secure access control and ID badging solutions. The deal expands Avery’s global portfolio of secure identification, badging, and credentialing technologies across enterprise, government, education, healthcare, and venue end markets.

Bugcrowd, a crowdsourced cybersecurity company, announced it has acquired Mayhem Security, an AI offensive security provider (formerly ForAllSecure) founded by Carnegie Mellon University researchers. The deal is intended to combine Bugcrowd’s global hacker community with Mayhem’s AI-driven automation for continuous security testing across the software development lifecycle; financial terms were not disclosed.

Zscaler, Inc. acquired SPLX, an AI security company, to extend the Zscaler Zero Trust Exchange platform with AI asset discovery, automated AI red teaming, runtime guardrails/prompt hardening, and governance capabilities. The deal is intended to help enterprises secure the full AI lifecycle—from development through deployment—across models, agentic workflows, RAG pipelines, and Model Context Protocol (MCP) servers, while strengthening protection against sensitive-data loss across prompts and outputs.

Ponte Partners, a San Francisco-based private equity firm, announced the acquisition of a portfolio of three technology companies—Fandom, Exabeam, and ExteNet—from an unnamed private equity investment firm seeking liquidity for its investors. The portfolio spans media, cybersecurity, and digital infrastructure services, expanding Ponte Partners’ technology exposure via a secondary-style portfolio transaction.

JumpCloud announced the acquisition of Breez, an Identity Threat Detection, Investigation, and Response (ITDR) platform, to expand its identity security capabilities and accelerate its security product roadmap. The deal brings Breez’s ITDR technology and identity security team into JumpCloud to deepen threat detection and response and enhance JumpCloud’s security data products; financial terms were not disclosed.

MTX Group Inc., a global technology consulting firm, acquired VerifyID.ai, an AI-based digital identity verification and fraud prevention platform built for the public sector. The deal strengthens MTX Group’s artificial intelligence and cybersecurity capabilities and expands its trusted digital identity solutions for government agencies and enterprises. VerifyID.ai’s platform supports password-less authentication, reusable digital IDs, and multi-factor verification with features such as facial/ID recognition and spoof/deepfake detection aligned with NIST 800-63A standards.

Riveron, a Dallas-based advisory firm, has acquired Eden Data, an Austin-based advisory firm specializing in cybersecurity, governance, risk and compliance (GRC), and AI. The acquisition expands Riveron’s Risk Advisory solutions across financial controls, compliance, and emerging technology risk management.

Imprivata, an enterprise access management provider, announced the acquisition of Verosint, a company specializing in Identity Threat Detection and Response (ITDR). Imprivata plans to integrate Verosint’s AI-powered risk engine into its enterprise access management platform to strengthen its advanced, frictionless and passwordless access strategy and improve security and workflow efficiency for enterprise customers.

C2A Security announced the acquisition of Vigilant Ops, a Pittsburgh-based product security and SBOM automation provider focused on healthcare and MedTech. The deal combines C2A Security’s AI-driven product security orchestration platform with Vigilant Ops’ compliance and SBOM capabilities to accelerate growth and expand in highly regulated sectors including MedTech, telecom, and defense.

Pentera acquired DevOcean, an AI-remediation management platform, to expand Pentera’s security validation offering with automated remediation capabilities. The deal adds DevOcean’s SecOps workflows and ~100 integrations to help customers triage findings, accelerate remediation, and support SLA/compliance-driven risk reduction.

NoFraud, an ecommerce fraud prevention company, announced the acquisition of Yofi AI, a return fraud and policy abuse detection platform for ecommerce retailers. The deal expands NoFraud’s capabilities beyond payment fraud into return and policy abuse, with Yofi AI’s features expected to be integrated into the NoFraud platform ahead of the holiday season.

Kaseya announced it has acquired INKY, an AI-powered email security provider focused on managed service providers (MSPs) and small to midsize businesses (SMBs). The acquisition is intended to strengthen Kaseya’s end-to-end cybersecurity platform and enhance Kaseya 365 User with next-generation, generative-AI-driven email protection. INKY will remain available as a standalone product and will also be included within Kaseya 365 User.

Hyperproof, an AI-powered enterprise governance, risk, and compliance (GRC) platform, acquired Expent.ai, an AI-native platform focused on vendor lifecycle management, vendor assurance, and third-party risk management. The deal expands Hyperproof’s capabilities in trust and third-party risk by adding Expent.ai’s agentic AI and vendor management functionality, enabling a unified approach to vendor intake, procurement, contracts, performance, and renewals.

On October 6, 2025, Epiq announced it acquired First Watch Data Breach Solutions, LLC from First Watch Technologies. The deal expands Epiq’s Cyber Incident Response capabilities and scales its end-to-end breach response services (e.g., notification, credit monitoring, call center, print/mail, SSN lookup, and hosting) across North America, the United Kingdom, EMEA, Australia, and APAC. Epiq also onboarded roughly 100 employees from the acquired business and will continue partnering with First Watch Technologies on preventive cybersecurity services such as managed detection and response tools.

Vectra AI announced the acquisition of Netography, a cloud-native network observability company, to expand the capabilities of the Vectra AI Platform for hybrid and multi-cloud enterprises. Netography Fusion will be integrated into Vectra AI’s portfolio as “Vectra Fusion,” adding agentless, cloud-native observability to strengthen detection and defense across modern network environments.

Everon, LLC signed a definitive agreement to acquire the business-to-business (B2B) segments of ADT LLC’s multifamily business, expanding Everon’s reach in the commercial multifamily security market. The transaction, initially announced September 15, 2025, closed on October 1, 2025, and adds capabilities such as access control, video surveillance, and self-guided tour solutions for multifamily property owners and managers.

Sunstone Partners made a strategic investment in Clearwater, acquiring majority ownership of the healthcare-focused cybersecurity and compliance solutions provider. The stake was purchased from Altaris, LLC and other existing shareholders; financial terms were not disclosed.

Pike Street Capital announced a strategic investment in DigiStor, a Vancouver, Washington-based provider of secure data-at-rest storage solutions including self-encrypting SSDs and removable drives. The investment is intended to support DigiStor’s organic growth initiatives such as product expansion, strengthened OEM partnerships, and broader geographic reach, and may also enable future strategic acquisitions in adjacent markets.

Fortified Health Security, a managed security services provider focused on healthcare cybersecurity, acquired Latitude Information Security, a healthcare-focused cybersecurity advisory firm. The deal expands Fortified’s cybersecurity advisory and HITRUST services and adds a Philadelphia office, with Latitude operating under the Fortified brand going forward.

On September 24, 2025, cybersecurity and compliance firm 360 Advanced announced it has acquired Security Compliance Associates (SCA). The deal expands 360 Advanced’s advisory, audit, and certification capabilities and strengthens its cybersecurity and compliance services offering for a broader client base. SCA, founded in 2007, provides cybersecurity and compliance advisory services including risk assessments, compliance audits, and security program development.

Cyberbit announced it has acquired RangeForce, bringing together two cyber range platforms focused on hyper-realistic attack simulation, SOC team assessment, and upskilling. RangeForce will operate as a wholly owned subsidiary of Cyberbit as the combined organization builds an AI-powered operational cyber readiness platform for enterprise and government customers.

Unico, a Brazilian digital identity (IDtech) company, acquired OwnID, a U.S.-based startup specializing in passwordless and passkey authentication. The deal supports Unico’s international expansion strategy and adds OwnID’s passkey-first biometric login, magic-link fallback, and analytics capabilities to Unico’s digital identity protection offering.

DigiCert announced it has acquired Valimail, a provider of zero trust email authentication (including DMARC) delivered as a service. The deal expands DigiCert ONE by adding email authentication capabilities to help protect organizations against phishing, spoofing, and domain-based threats. DigiCert is backed by Clearlake Capital Group, Crosspoint Capital Partners, and TA Associates.

RedZone Technologies, a managed security service provider and IT services firm focused on highly regulated industries, received a growth investment from private equity firm ParkerGale. The terms were not disclosed, and the investment coincides with the appointment of Gary Simat as CEO to help scale RedZone’s security-first managed services platform.

SEON, a fraud prevention and AML compliance platform, closed an $80 million Series C financing round led by Sixth Street Growth. Existing investors IVP, Creandum, and Firebolt participated, alongside new investor Hearst, to support SEON’s AI-powered product development and global expansion.

SDG Corporation acquired Hub City Media, Inc. (HCM), an identity and access management (IAM) consultancy. The deal expands SDG’s end-to-end IAM capabilities across advisory, integration, and managed services and is supported by SDG’s majority shareholder, Recognize Partners LP. Financial terms were not disclosed.

Quantum Leap announced the completion of an investment from funds managed by Carlyle. As part of the transaction, Quantum Leap’s CEO/founder Jim Miller, Razor’s Edge, and other existing shareholders reinvested alongside Carlyle. Quantum Leap provides cybersecurity and intelligence solutions for U.S. government national security customers and is headquartered in Leesburg, Virginia.

AMERICAN SYSTEMS announced it has acquired Epsilon, Inc., a managed IT and cybersecurity provider headquartered in Weaverville, North Carolina. The deal is AMERICAN SYSTEMS’ largest acquisition to date and adds more than 400 employees, expanding its scale and service capabilities for federal and commercial customers. Epsilon will operate as a wholly owned subsidiary until its offerings are integrated in January 2026.

UltraViolet Cyber, Inc. acquired Black Duck's Application Security Testing (AST) services business, expanding UltraViolet's application security testing capabilities within its unified offensive and defensive cybersecurity services portfolio. The acquired AST services (including penetration testing, red teaming, threat modeling, and secure software development consulting) will be integrated into UltraViolet's offerings, and the transaction also establishes a commercial partnership between the companies. Achieve Partners is identified as the equity sponsor supporting UltraViolet in the acquisition.

Summit 7 acquired GRC Academy, a training platform founded by cybersecurity professional Jacob Hill, to expand its education and enablement offering for Defense Industrial Base (DIB) organizations. The acquisition strengthens Summit 7’s capabilities around CMMC and related federal compliance training (including NIST 800-171) for defense contractors.

Becklar, a provider of critical event monitoring and emergency response solutions and a portfolio company of Graham Partners, acquired Dynamark Monitoring, a leading U.S. wholesale alarm monitoring provider. Dynamark is headquartered in Hagerstown, Maryland and operates UL-listed monitoring centers, adding expanded monitoring capabilities (including East Coast capacity) to Becklar’s monitoring platform.

Varonis Systems acquired SlashNext to expand its Data Security Platform into AI-native email and collaboration-app security. The deal adds SlashNext’s predictive AI phishing and social-engineering detection capabilities, which Varonis plans to integrate with its platform and managed data detection and response (MDDR) service to stop threats earlier in the attack chain.

Continuous (formerly SMA Technologies) acquired Sycorr, Inc., the maker of the Permission Assist identity and access management solution for banks and credit unions. The deal strengthens Continuous’s security, access management automation, and compliance capabilities for financial institutions; the transaction closed on August 7, 2025. Continuous is a portfolio company of Thoma Bravo, and Generational Group advised Sycorr on the sale.

Incode Technologies, Inc. acquired AuthenticID to strengthen its AI-driven digital identity, identity verification, and fraud detection capabilities amid rising GenAI-enabled fraud and increasing use of autonomous AI agents. The combination is positioned to deliver a more comprehensive, enterprise-ready identity orchestration platform, leveraging Incode’s AI models and AuthenticID’s expertise in regulated, high-volume environments.

LevelBlue completed its acquisition of Trustwave, combining the two cybersecurity providers to create what it describes as the world’s largest pure-play managed security services provider (MSSP). The combined company brings together LevelBlue’s managed security and threat intelligence capabilities with Trustwave’s managed detection and response (MDR), Fusion Security Operations Platform, and SpiderLabs research team. Financial terms were not disclosed.

Cryptic Vector, a portfolio company of Enlightenment Capital, has acquired Caesar Creek Software. The deal expands Cryptic Vector’s offensive cyber capabilities—adding Caesar Creek’s expertise in vulnerability analysis, exploit development, reverse engineering, and network security for U.S. Intelligence Community and Department of Defense customers.

Invicti Security announced it has acquired Kondukto to expand Invicti’s dynamic application security testing (DAST) platform with application security posture management (ASPM) capabilities. The combination is intended to provide a unified view of application security risk by correlating runtime-validated DAST findings with broader AppSec toolchain data and orchestration.

KeyData Cyber, a CIVC Partners portfolio company, acquired BeyondID, an AI-powered managed identity solutions provider with deep expertise in Okta and identity-first zero trust solutions. The combination expands KeyData Cyber’s identity security capabilities across IAM, CIAM, PAM and IGA and adds BeyondID’s AI-powered Identity Command Center platform, creating one of the largest pure-play identity security firms in North America.

Geospace Technologies Corporation acquired 100% of the outstanding shares of GeoVox Security, Inc., the company that licensed and commercialized Oak Ridge National Laboratory’s Heartbeat Detector security technology. Effective July 31, 2025, the acquisition adds a portable heartbeat-detection product used at prisons and border checkpoints to Geospace’s perimeter security and surveillance offerings, with plans to offer the product via a subscription model.

LevelBlue completed the acquisition of Aon’s Cybersecurity and Intellectual Property (IP) Litigation consulting groups, including Stroz Friedberg and Elysium Digital. Following the transaction, the acquired consulting group will operate as Stroz Friedberg, a LevelBlue company. The deal expands LevelBlue’s incident response and advisory capabilities and deepens its footprint in the legal sector.

Concentric AI announced that it has acquired Swift Security and Acante to expand its Semantic Intelligence Platform into an end-to-end data security governance offering. The acquisitions add capabilities for identifying “shadow GenAI” and safeguarding data across public GenAI tools, unifying DSPM, DLP, and GenAI governance across cloud and on-premises environments.

Sayari announced the acquisition of Mirato, an AI-driven third-party risk management (TPRM) provider. The deal combines Sayari’s global commerce and entity graph data with Mirato’s workflow automation AI to deliver an integrated risk intelligence and third-party/supply chain risk management solution.

HeroDevs, a provider of security solutions for deprecated open-source software, raised $125 million in a strategic investment led by PSG, with participation from existing investor Album. The capital will be used to expand HeroDevs' Never-Ending Support offerings and includes a $20 million commitment to an Open Source Sustainability Fund supporting open-source projects and best practices for software end-of-life management.

Evergreen acquired ImageQuest, a Nashville-based managed services provider (MSP) and managed security services provider (MSSP) delivering managed IT, cybersecurity, and compliance solutions to highly regulated industries. ImageQuest will continue operating under Lyra Technology Group, Evergreen's managed IT services provider portfolio, with its leadership team and operations remaining in place.

Asylon, Inc. closed a $24 million Series B funding round led by Insight Partners, with strategic participation from Veteran Ventures Capital, Allegion Ventures, and the GO PA Fund. The capital will be used to accelerate product innovation, scale deployments, and expand Asylon’s robotic perimeter security services across commercial and government sectors.

Lansweeper announced the acquisition of Redjack to strengthen its Technology Asset Intelligence platform with Redjack’s passive, traffic-based asset discovery and application dependency mapping. The deal includes Redjack’s technology, customers, partner ecosystem, and workforce, expanding Lansweeper’s visibility across enterprise, cloud, and edge environments and enhancing use cases such as attack surface management and third-party risk management.

Sphinx, a developer of counterintelligence and cyber tools, has acquired Enigma International. The deal expands Sphinx’s cybersecurity and intelligence capabilities by adding Enigma’s language and systems development expertise and is expected to strengthen Sphinx’s ability to serve defense, commercial security, and U.S. federal government customers through key contract vehicles.

Nautic Partners, in partnership with AccessIT Group management, completed the acquisition of AccessIT Group, Inc. as a new platform investment. AccessIT Group is a cybersecurity solutions provider headquartered in King of Prussia, Pennsylvania. The transaction closed on July 8, 2025.

Thrive, a global managed services provider focused on cybersecurity, cloud, and IT managed services, announced it has acquired Abacode. Abacode is a managed cybersecurity and compliance provider headquartered in Tampa, Florida, and the deal strengthens Thrive’s governance, risk, and compliance (GRC) capabilities and expands its footprint in the Southeast United States.

Hg made a significant strategic investment in A-LIGN, acquiring a majority stake in the cybersecurity compliance services provider from Warburg Pincus. The investment is intended to accelerate A-LIGN’s global expansion and growth as demand rises for cyber compliance audits and related assessments. HgCapital Trust plc disclosed it will invest approximately £48 million as part of Hg’s overall investment, alongside other institutional clients via the Hg Genesis Fund.

ArcherHall announced that R3 Digital Forensics is now part of ArcherHall, combining capabilities in digital forensics, eDiscovery, and cybersecurity. The merger includes an expansion with the opening of a new office in Austin, Texas to enhance service to clients.

Mill Point Capital LLC acquired SS8 Networks, a Milpitas, California-based provider of lawful and location intelligence and monitoring center platforms. SS8 will continue operating under its existing brand and leadership, with the investment intended to support product development, AI-driven innovation, and expansion in mediation, criminal monitoring, and investigative solutions.

Magnet Forensics announced the acquisition of Dark Circuit Labs, a U.S.-based company specializing in advanced vulnerability research and exploit development. The deal enhances Magnet Forensics’ vulnerability research capabilities and expands its ability to support U.S. federal customers and projects.

EyeQ Monitoring, a provider of remote video monitoring and security intelligence solutions, received a strategic growth investment from WestView Capital Partners. The funding will support EyeQ’s expansion across core end markets and accelerate development of its next-generation analytics and business intelligence capabilities. Financial terms were not disclosed.

Neovera acquired Greenway Solutions, an adversarial fraud testing firm, to add live fraud-control testing and "Fraud Red Team" capabilities to its cybersecurity and cloud services portfolio. Greenway, founded in 2004 and headquartered in Charlotte, North Carolina, helps banks, fintechs, healthcare providers, and other regulated organizations test fraud defenses using real-world tactics in production environments.

CloudWave acquired BlueOrange Compliance to expand its end-to-end cybersecurity offerings for healthcare organizations. The deal adds BlueOrange Compliance’s information privacy, regulatory compliance, and risk management capabilities to CloudWave’s healthcare-focused managed security and cloud infrastructure services.

Cytracom, a provider of SASE and UCaaS solutions for managed service providers, acquired Tentacle, a cybersecurity risk and GRC platform. The deal expands Cytracom’s Security Risk Management strategy by adding capabilities for cybersecurity assessments, third-party risk monitoring, and operationalizing governance, risk, and compliance programs for MSPs and their clients.

Horizon3.ai announced a $100 million Series D funding round to scale its NodeZero autonomous pentesting platform and expand globally. The round was led by NEA with participation from SignalFire, Craft Ventures, 9Yards Capital, and Qualcomm Ventures, bringing total capital raised to $178.5 million.

Securonix announced the acquisition of ThreatQuotient, creator of the ThreatQ external threat intelligence platform. The deal combines Securonix’s agentic AI-driven SIEM capabilities with ThreatQuotient’s curated threat intelligence to deliver an integrated threat detection, investigation, and response (TDIR) platform aimed at reducing mean time to respond (MTTR) and improving security operations outcomes.

Liongard announced the acquisition of Darklight’s Cyio platform, an AI-powered cyber risk solution for vulnerability prioritization. The deal strengthens Liongard’s attack surface management capabilities by adding continuous risk analysis, contextual threat prioritization, and reporting for MSPs and other security partners.

NETGEAR Inc. announced a definitive agreement to acquire Exium, a cybersecurity company, to expand its cloud-based solutions for business connectivity. Exium’s Secure Access Service Edge (SASE) platform and team will enhance NETGEAR for Business with an integrated networking and security offering aimed at MSPs and small-to-medium enterprises, with closing expected by the end of Q2 2025.

OneSpan Inc. announced it has acquired Nok Nok Labs Inc., a provider of FIDO passwordless software authentication solutions. The deal expands OneSpan’s authentication portfolio and supports deeper integration of FIDO standards alongside offerings such as FIDO2 security keys, targeting banking and enterprise customers globally.

NinjaOne, an automated endpoint management platform, has completed its acquisition of Dropsuite for approximately $270 million. The deal adds Dropsuite’s SaaS backup, data protection, and email archiving capabilities to NinjaOne, enabling customers to unify endpoint, server, and SaaS application backup in a single interface and strengthen resilience against ransomware.

Scytale, a trust and security compliance automation provider, announced the acquisition of AudITech, a provider of SOX IT General Controls (ITGC) automation solutions. The deal will integrate AudITech’s SOX ITGC automation and audit management capabilities into Scytale’s Enterprise suite, enabling customers to manage SOC 2, ISO 27001, and SOX compliance from a single platform.

MIND, an AI-native data loss prevention (DLP) and insider risk management platform, raised $30 million in Series A funding seven months after emerging from stealth. The round was led by Paladin Capital Group and Crosspoint Capital Partners, with participation from Okta Ventures and existing investor YL Ventures. Proceeds will support strategic growth and enhancements to MIND’s data security platform capabilities.