Private Equity-Backed Cybersecurity Acquisitions

  • Buyer
    Sterling Investment Partners
    Target
    Cyber Advisors
    Industry
    Cybersecurity
    Type
    Buyout

    Sterling Investment Partners announced the acquisition of Cyber Advisors, a provider of cybersecurity and managed IT services. Cyber Advisors, headquartered in Maple Grove, Minnesota, supports 1,800+ customers nationwide with 330+ professionals.

  • Buyer
    Terminus Capital Partners (TCP)
    Target
    Eventus
    Industry
    Cybersecurity
    Type
    Buyout

    Terminus Capital Partners (TCP) has made a majority investment in Eventus, a trade surveillance and financial risk solutions provider. The deal terms were not disclosed, and TCP’s ownership is intended to accelerate Eventus’ global expansion and product innovation, including continued platform capability development and selective acquisitions.

  • Buyer
    Markon, Sterling Investment Partners
    Target
    Millennium Corporation
    Industry
    Cybersecurity
    Type
    Addon

    Markon, a Sterling Investment Partners portfolio company, has acquired Millennium Corporation to expand full‑spectrum cyber capabilities across defense, intelligence, and federal civilian markets. The deal combines Markon’s enterprise delivery and program execution strengths with Millennium’s adversarial threat emulation, cyber operations, testing, training, and software capabilities as an add‑on to Markon’s platform.

  • Buyer
    Valiant Solutions, LLC
    Target
    Abile Group
    Industry
    Cybersecurity
    Location
    United States
    Type
    Addon

    Valiant Solutions, LLC announced it has acquired Abile Group, a provider of secure network and cyber engineering services and technology for national security customers. The deal expands Valiant’s cybersecurity technical depth—particularly in endpoint protection, cloud-native architectures, and network engineering—to support Zero Trust and cyber-enabled mission requirements across classified and unclassified environments.

  • Buyer
    Quantum Leap
    Target
    Veros Technologies
    Seller
    Razor's Edge
    Industry
    Cybersecurity
    Type
    Buyout

    Veros Technologies, a portfolio company of Razor's Edge, has announced its acquisition by Quantum Leap, a portfolio company of Carlyle. Terms of the transaction were not disclosed. Veros provides advanced cyber and operational capabilities to U.S. Government customers, particularly within the Intelligence Community.

  • Buyer
    Integrity360
    Target
    Advantus360
    Industry
    Cybersecurity
    Location
    Alberta, Canada
    Type
    Addon

    Integrity360 has acquired Calgary-based cybersecurity services provider Advantus360 to establish the group’s first North American hub. The deal — terms undisclosed — gives Integrity360 an operating base in Canada and will be used to develop a Calgary Security Operations Centre and expand the group’s managed and professional cyber services across Canada and the US.

  • Buyer
    Sole Source Capital LLC
    Target
    Brite
    Industry
    Cybersecurity
    Type
    Buyout

    Sole Source Capital LLC has acquired Brite, a cybersecurity and managed IT services provider headquartered in Victor, New York, marking Sole Source's first platform investment from SSC Partners Fund III. The deal positions Brite as a buy-and-build platform to pursue consolidation in the fragmented cybersecurity managed services market; financial terms were not disclosed and Brite's existing management team will remain in place.

  • Buyer
    ThreatModeler, Invictus Growth Partners
    Target
    IriusRisk
    Industry
    Cybersecurity
    Location
    Spain
    Type
    Addon

    ThreatModeler has acquired IriusRisk to combine two enterprise threat-modeling platforms, broaden global scale, and accelerate product development. The combined business — majority owned by Invictus Growth Partners, with Paladin Capital Group remaining a shareholder — aims to create the industry’s largest proprietary threat-model dataset and deepen secure-by-design support for security and development teams.

  • Buyer
    Gryphon Investors
    Target
    Fortreum
    Industry
    Cybersecurity

    Gryphon Investors has completed a majority growth recapitalization of Fortreum, a Lansdowne, Virginia-based cybersecurity services firm specializing in compliance, audit, and technical testing including FedRAMP, CMMC, ISO, PCI, and SOC. The investment will fund expansion of Fortreum's offerings and accelerate development and adoption of its XRAMP continuous validation platform and AI-enabled capabilities; company founders will retain a significant equity stake. Financial terms were not disclosed.

  • Buyer
    Complete, Heritage Holding
    Target
    Columbia Advisory Group, LLC
    Seller
    Columbia Advisory Group shareholders
    Industry
    Cybersecurity
    Type
    Addon

    Complete, a Charlotte-based MSP backed by private investment firm Heritage Holding, has acquired Columbia Advisory Group (CAG), a Dallas-based cybersecurity and GRC consulting firm. The add-on expands Complete's managed IT and cybersecurity capabilities and brings CAG's expertise serving higher education, state and local government, and mid-market enterprise clients into Complete's platform.

  • Buyer
    NuView, RFE Investment Partners, Mansfield Investment Partners
    Target
    Beyond Secure
    Industry
    Cybersecurity
    Type
    Addon

    NuView, a newly formed managed IT and cybersecurity platform backed by RFE Investment Partners (majority) and Mansfield Investment Partners, has acquired Austin-based managed security provider Beyond Secure. The investment will support NuView’s organic growth and strategic add-on acquisitions to expand its managed IT, cybersecurity, compliance, and advisory capabilities for regulated industries.

  • Buyer
    GI Partners
    Target
    Netwatch
    Seller
    The Riverside Company (Riverside)
    Industry
    Cybersecurity
    Location
    Ireland
    Type
    Buyout

    Netwatch, a global provider of AI-powered remote security monitoring and intervention services, has signed a definitive agreement to be acquired by GI Partners. The transaction is expected to close in the first quarter of 2026, subject to customary regulatory approvals and closing conditions. Netwatch will operate as an independent company within GI Partners’ portfolio.

  • Buyer
    RKON Technologies
    Target
    ScaleSec
    Seller
    Vixul
    Industry
    Cybersecurity
    Type
    Buyout

    RKON Technologies has acquired cloud security and consulting firm ScaleSec, integrating ScaleSec’s cloud security, compliance, and managed services capabilities into RKON’s offerings. The seller was Vixul (ScaleSec’s accelerator/portfolio backer), and the transaction strengthens RKON’s multicloud security and managed services capabilities; financial terms were not disclosed.

  • Buyer
    MetaCompliance, Keensight Capital
    Target
    Junglemap
    Industry
    Cybersecurity
    Location
    Norway
    Type
    Addon

    MetaCompliance has acquired Junglemap, a Nordic security and compliance awareness provider, in a transaction supported by Keensight Capital. The deal brings Junglemap’s NanoLearning methodology and AI content capabilities into MetaCompliance’s human risk management platform and strengthens the company’s Nordic and broader European footprint.

  • Buyer
    Checkmarx
    Target
    Tromzo
    Industry
    Cybersecurity
    Type
    Buyout

    Checkmarx has acquired Tromzo, an AI-native startup that builds autonomous triage and remediation agents for application security, and will integrate Tromzo's reasoning engine and engineering team into the Checkmarx One platform. The acquisition brings Tromzo's founders and AI engineers into Checkmarx to power new Checkmarx Assist agents and accelerate enterprise-grade autonomous AppSec capabilities starting in early 2026.

  • Buyer
    Woven Solutions
    Target
    Cystemic Security
    Industry
    Cybersecurity
    Type
    Addon

    Woven Solutions, a Reston, Virginia-based provider of AI-enabled mission software, has acquired Cystemic Security to expand its cyber forensics and managed attribution capabilities. The deal — Woven's first acquisition after a strategic investment from Falfurrias Management Partners — strengthens its ability to deliver end-to-end cyber tooling and managed attribution solutions for U.S. national security and intelligence customers.

  • Buyer
    CVC Capital Partners
    Target
    Smiths Detection
    Seller
    Smiths Group plc
    Industry
    Cybersecurity
    Location
    United Kingdom
    Type
    Buyout

    CVC announced it has entered into an agreement to acquire Smiths Detection, a global threat-detection and security-screening technology company, from Smiths Group plc for £2bn. The transaction is subject to regulatory approvals and is expected to close in the second half of 2026.

  • Buyer
    Allurity
    Target
    MSF Partners (Monti Stampa Furrer & Partners)
    Industry
    Cybersecurity
    Location
    Zurich, Switzerland
    Type
    Buyout

    Allurity, a Stockholm-based European cybersecurity group supported by investor Trill Impact, has acquired MSF Partners (Monti Stampa Furrer & Partners), an OT/ICS security specialist headquartered in Zurich, Switzerland. The deal expands Allurity’s operational technology and critical-infrastructure security capabilities, strengthening its offering across energy, manufacturing, mining and other high-risk sectors.

  • November 19, 2025
    Buyer
    Amplix, Gemspring Capital
    Target
    24By7Security
    Industry
    Cybersecurity
    Type
    Addon

    Amplix, a Gemspring Capital portfolio company, has acquired 24By7Security, a Coral Springs-based cybersecurity consulting and compliance firm. The add-on expands Amplix’s cybersecurity capabilities—adding services such as program development, risk assessments, vCISO advisory, incident response planning, security testing, and managed security operations—to better support clients across regulated and non-regulated industries.

  • Buyer
    Axiom GRC
    Target
    IS Partners
    Industry
    Cybersecurity
    Type
    Addon

    Axiom GRC has acquired IS Partners, a U.S. cyber assurance and compliance services provider, to accelerate its North American expansion and broaden its cyber assurance and compliance offerings. IS Partners—headquartered in the Philadelphia area—serves roughly 600 customers with recurring audits across frameworks such as SOC 1/2, ISO 27001, HITRUST, HIPAA, PCI DSS and CMMC; the deal is Axiom's first U.S.-headquartered acquisition and its fifth since partnering with Inflexion.

  • Buyer
    MorganFranklin Cyber
    Target
    Lynx Technology Partners
    Industry
    Cybersecurity
    Type
    Addon

    MorganFranklin Cyber, a PE-backed cybersecurity advisory and managed services firm, has acquired Lynx Technology Partners to expand its cybersecurity, risk management, and business development capabilities. As part of the deal, Lynx founder Aric K. Perminter joins MorganFranklin Cyber as Managing Director, Client Relations to support integration and client growth.

  • Buyer
    Ponte Partners
    Target
    Fandom, Exabeam, ExteNet
    Seller
    A private equity investment firm (unnamed; seeking liquidity for its investors)
    Industry
    Cybersecurity
    Location
    United States
    Type
    Buyout

    San Francisco-based private equity firm Ponte Partners has acquired a portfolio of three technology companies — Fandom, Exabeam and ExteNet — from an unnamed private equity investor seeking liquidity. The acquisition expands Ponte Partners' technology portfolio across media, cybersecurity, and digital infrastructure and coincides with the appointment of Howard Lee as Managing Partner to support the firm's secondary-investment strategy.

  • Buyer
    Niobrara Capital
    Target
    Noventiq
    Industry
    Cybersecurity
    Location
    United Kingdom

    Noventiq, a London-headquartered provider of digital transformation and cybersecurity solutions, has received a strategic equity investment from U.S.-based private equity firm Niobrara Capital. The investment deepens Noventiq's relationship with existing investor Da Vinci Capital and is intended to accelerate the company’s global growth and expand service offerings in cybersecurity and digital transformation.

  • October 15, 2025
    Buyer
    Riveron
    Target
    Eden Data
    Industry
    Cybersecurity
    Type
    Buyout

    Riveron has acquired Eden Data, an Austin-based cybersecurity, GRC, and AI advisory firm with nearly 60 professionals, to expand its Risk Advisory capabilities. The acquisition broadens Riveron's offerings in cybersecurity, compliance, and AI risk management, integrating Eden Data's expertise into Riveron's finance- and CFO-focused advisory platform.

  • October 14, 2025
    Buyer
    Imprivata
    Target
    Verosint
    Industry
    Cybersecurity
    Type
    Addon

    Imprivata has acquired Verosint to integrate Verosint’s AI-powered Identity Threat Detection and Response (ITDR) capabilities into Imprivata’s enterprise access management platform. The deal is intended to strengthen Imprivata’s advanced and passwordless access strategy by adding continuous risk signaling, real-time detection, and automated response to identity-based threats at enterprise scale.

  • October 9, 2025
    Buyer
    Nomios, Keensight Capital
    Target
    Intragen
    Seller
    FPE
    Industry
    Cybersecurity
    Location
    United Kingdom
    Type
    Addon

    Nomios, a pan-European cybersecurity services provider backed by Keensight Capital, has announced the acquisition of Intragen, a European specialist in Identity and Access Management (IAM). The deal is intended to expand Nomios’s cybersecurity offering with digital identity and privileged access management capabilities, supported by Keensight Capital.

  • Buyer
    Epiq
    Target
    First Watch Data Breach Solutions, LLC
    Seller
    First Watch Technologies, Inc.
    Industry
    Cybersecurity
    Type
    Buyout

    Epiq has acquired First Watch Data Breach Solutions, LLC from First Watch Technologies to expand its cyber incident response and notification capabilities. The acquisition brings roughly 100 First Watch Data Breach Solutions employees into Epiq and broadens Epiq’s breach response, credit monitoring, call center, and notification services across North America, UK/EMEA, Australia and APAC.

  • Buyer
    INVISION, PINOVA
    Target
    Utimaco TS (Utimaco Telecom Solutions / Utimaco TS GmbH)
    Seller
    Utimaco (Utimaco Holding)
    Industry
    Cybersecurity
    Location
    North Rhine-Westphalia, Germany

    Swiss investor INVISION and German private equity firm PINOVA have acquired Utimaco’s Telecom Solutions division (Utimaco TS), a carve-out focused on Lawful Interception Management Systems. The transaction closed on September 30, 2025 and the newly independent company began operating on October 1, 2025, enabling the unit to pursue a dedicated growth strategy under its new owners.

  • Buyer
    Sunstone Partners
    Target
    Clearwater
    Seller
    Altaris, LLC, other existing shareholders
    Industry
    Cybersecurity
    Type
    Buyout

    Sunstone Partners, a growth-oriented private equity firm, has acquired majority ownership of Clearwater from Altaris, LLC and other existing shareholders. The investment will support Clearwater’s expansion of managed security, consulting, and software capabilities across the healthcare ecosystem and the defense industrial base (via its Redspin division).

  • Buyer
    360 Advanced
    Target
    Security Compliance Associates
    Industry
    Cybersecurity
    Type
    Addon

    Cybersecurity firm 360 Advanced has acquired Security Compliance Associates (SCA) to expand its cybersecurity and compliance advisory, audit, and certification capabilities. The deal strengthens 360 Advanced's service offering across regulatory frameworks and marks another strategic add-on to the company's recent acquisition activity.

  • September 23, 2025
    Buyer
    Cyberbit, Charlesbank Capital Partners, Claridge Capital
    Target
    RangeForce
    Industry
    Cybersecurity
    Type
    Buyout

    Cyberbit has acquired RangeForce, combining two leading cyber range and training platforms to create an AI-powered operational cyber readiness offering for enterprises and governments. The deal is backed by Cyberbit's financial sponsors, Charlesbank Capital Partners and Claridge, and RangeForce will operate as a wholly owned subsidiary of Cyberbit.

  • September 16, 2025
    Buyer
    DigiCert, Clearlake Capital Group, Crosspoint Capital Partners, TA Associates Management
    Target
    Valimail
    Industry
    Cybersecurity
    Type
    Buyout

    DigiCert, backed by Clearlake Capital, Crosspoint Capital and TA Associates, has acquired Valimail, a leading provider of zero trust email authentication and DMARC-as-a-service. The deal adds email authentication capabilities to the DigiCert ONE platform, expands DigiCert into the $4B+ paid DMARC market, and brings Valimail's FedRAMP-authorized, cloud-native solutions and ~92,000 clients under DigiCert's digital trust portfolio.

  • Buyer
    ParkerGale
    Target
    RedZone Technologies
    Industry
    Cybersecurity

    Chicago-based private equity firm ParkerGale has made a growth investment in RedZone Technologies, an Annapolis-headquartered managed security service provider (MSSP). The investment will support RedZone's organic and inorganic growth plans, expand partner relationships, and accelerate sales and marketing while RedZone focuses on security, compliance, and service delivery for highly regulated industries.

  • Buyer
    SDG Corporation
    Target
    Hub City Media, Inc.
    Industry
    Cybersecurity
    Type
    Buyout

    SDG Corporation has acquired Hub City Media, Inc., a consultancy specializing in identity and access management (IAM), to expand its end-to-end IAM capabilities across advisory, integration, and managed services. The deal strengthens SDG's identity-first security offering and deepens partnerships with leading identity technology providers while integrating Hub City Media's technical expertise into SDG's global managed services.

  • September 10, 2025
    Buyer
    The Carlyle Group (funds managed by Carlyle), Razor's Edge
    Target
    Quantum Leap
    Industry
    Cybersecurity

    Funds managed by global investment firm Carlyle completed a growth investment in Quantum Leap, a Leesburg, Virginia-based provider of cybersecurity and intelligence solutions for U.S. government customers. Management (including founder and CEO Jim Miller), Razor's Edge, and other existing shareholders reinvested alongside Carlyle to support the company's continued growth and capability expansion in national security markets.

  • Buyer
    UltraViolet Cyber, Inc., Achieve Partners
    Target
    Black Duck (Application Security Testing services business)
    Seller
    Black Duck
    Industry
    Cybersecurity

    UltraViolet Cyber acquired Black Duck's Application Security Testing (AST) services business, integrating penetration testing, red teaming, threat modeling, cloud/container risk assessments, and secure development consulting into its unified security operations portfolio. Achieve Partners served as the equity sponsor for the transaction; Black Duck will retain its core software and SaaS offerings while its professional and managed AST services join UltraViolet to expand capability for commercial and federal clients.

  • Buyer
    Red Helix, LDC
    Target
    Risk Crew
    Industry
    Cybersecurity
    Location
    England, United Kingdom
    Type
    Addon

    LDC-backed cybersecurity provider Red Helix has acquired UK-based security consultancy Risk Crew to expand its cyber assurance capabilities, including GRC consulting and penetration testing. The add-on strengthens Red Helix's service offering to clients across the UK and Europe and follows LDC's 2021 investment to support the business’s growth and acquisition strategy.

  • August 25, 2025
    Buyer
    Continuous, Thoma Bravo
    Target
    Sycorr, Inc.
    Industry
    Cybersecurity
    Type
    Addon

    Continuous, a Thoma Bravo portfolio company, has acquired Sycorr, a provider of identity and access management software for banks and credit unions. The deal adds Sycorr's Permission Assist capability to Continuous's platform to strengthen security, automate user provisioning and streamline compliance for financial institutions.

  • Buyer
    Cryptic Vector, Enlightenment Capital
    Target
    Caesar Creek Software
    Industry
    Cybersecurity
    Type
    Addon

    Cryptic Vector, a portfolio company of Enlightenment Capital, has acquired Caesar Creek Software, a Dayton-based offensive cyber R&D firm that provides vulnerability analysis, exploit development, and reverse engineering services to the U.S. Intelligence Community and Department of Defense. The add-on strengthens Cryptic Vector's offensive cyber and electronic warfare capabilities and expands its engineering talent pool supporting national security customers.

  • Buyer
    The One 23 Group, Willow Creek Partners
    Target
    Integrated Computer Solutions
    Industry
    Cybersecurity
    Type
    Addon

    The One 23 Group (O23G), a Willow Creek Partners‑backed federal technology and cybersecurity platform, has acquired Integrated Computer Solutions (ICS), a provider of mission IT and cybersecurity services to U.S. federal agencies. The deal expands O23G’s mission IT, secure cloud modernization, and AI/DevSecOps capabilities for defense, homeland security, and justice customers.

  • Buyer
    Invicti Security
    Target
    Kondukto
    Industry
    Cybersecurity
    Location
    Istanbul, Turkey
    Type
    Buyout

    Invicti Security has acquired Kondukto, an Application Security Posture Management (ASPM) pioneer, to integrate proof-based DAST findings with ASPM capabilities and deliver unified AppSec posture management. The acquisition strengthens Invicti's platform with centralized orchestration, AI-assisted remediation, and automation to improve vulnerability prioritization and developer-centric remediation workflows.

  • Buyer
    KeyData Cyber, CIVC Partners, LP
    Target
    BeyondID
    Industry
    Cybersecurity
    Type
    Addon

    KeyData Cyber, a CIVC Partners–backed identity and access management (IAM) provider, has acquired BeyondID, an AI-powered managed identity solutions provider with deep Okta expertise. The deal expands KeyData's advisory, implementation and managed-services capabilities, adds BeyondID's Identity Command Center platform and increases the combined company's delivery capacity and geographic reach across North America and beyond.

  • Buyer
    SWIF Maven Equity Finance (Maven Capital Partners), British Business Bank - South West Investment Fund
    Target
    Blueskytec
    Industry
    Cybersecurity
    Location
    England, United Kingdom

    Maven (via SWIF Maven Equity Finance) has invested £1.5 million in Bath-based cybersecurity hardware specialist Blueskytec through the British Business Bank’s South West Investment Fund. The growth capital will support full-scale deployment with industrial partners, recruitment, and expansion of manufacturing capacity and business development as Blueskytec targets defence, civil nuclear and energy infrastructure markets.

  • Buyer
    PSG, Album
    Target
    HeroDevs
    Industry
    Cybersecurity

    HeroDevs raised $125 million in a strategic growth investment led by PSG with participation from existing investor Album. The funding will be used to expand HeroDevs' Never-Ending Support solutions and includes a $20 million commitment to an Open Source Sustainability Fund to support end-of-life open-source projects.

  • Buyer
    Lansweeper
    Target
    Redjack
    Industry
    Cybersecurity
    Type
    Buyout

    Lansweeper has acquired Redjack to integrate Redjack's passive, traffic-based asset discovery and application dependency mapping into Lansweeper's Technology Asset Intelligence platform. The deal expands Lansweeper's visibility and attack-surface management capabilities, bringing Redjack's customers, technology, partners, and workforce into Lansweeper's product roadmap.

  • Buyer
    Limerston Capital
    Target
    DigitalXRAID
    Industry
    Cybersecurity
    Location
    England, United Kingdom
    Type
    Addon

    Limerston Capital has added DigitalXRAID, an award-winning UK managed security services provider (MSSP), to its cybersecurity platform as an add-on acquisition. The deal expands the group's SOC, managed services, digital forensics and incident response capabilities and follows Limerston's May acquisition of CyberCrowd as part of a buy-and-build strategy to create a leading UK cyber security group.

  • Buyer
    Signicat
    Target
    Inverid
    Seller
    Main Capital, Inverid founders
    Industry
    Cybersecurity
    Location
    Overijssel, Netherlands
    Type
    Addon

    Signicat has acquired Inverid, the Dutch provider of NFC-based identity verification and creator of the ReadID solution, from majority shareholder Main Capital and the founders for an undisclosed sum. The deal brings Inverid's NFC document-verification capability into Signicat's pan-European digital identity platform, accelerating product capability expansion and enabling immediate technological and commercial synergies.

  • Buyer
    Hg, HgCapital Trust plc (HgT), Hg Genesis Fund (institutional clients)
    Target
    A-LIGN
    Seller
    Warburg Pincus
    Industry
    Cybersecurity
    Type
    Buyout

    Hg has acquired a majority stake in A-LIGN from Warburg Pincus to support the cybersecurity compliance firm's next phase of global expansion. HgCapital Trust plc and other institutional clients of Hg (via the Hg Genesis Fund) are investing alongside Hg; terms were not disclosed. A-LIGN, headquartered in Tampa, Florida, is a tech-enabled cyber compliance and audit provider serving over 5,700 clients and will leverage Hg's resources to scale internationally and expand services.

  • Buyer
    Nautic Partners, LLC
    Target
    AccessIT Group, Inc.
    Industry
    Cybersecurity
    Type
    Buyout

    Nautic Partners has completed the acquisition of AccessIT Group as a new platform investment, closing on July 8, 2025. AccessIT Group, a King of Prussia, Pennsylvania–based cybersecurity solutions provider, will remain led by CEO Joe Luciano while co-founder David Hark retires; Nautic will support expansion of the firm's capabilities and geographic reach.

  • Buyer
    Thrive
    Target
    Abacode
    Industry
    Cybersecurity
    Type
    Buyout

    Thrive, a global managed services and cybersecurity provider, has acquired Abacode, a Tampa-based managed cybersecurity and compliance provider (MCCP). The acquisition strengthens Thrive's governance, risk, and compliance (GRC) capabilities and expands its footprint in the Southeast U.S., enhancing compliance offerings for mid-market clients across regulated industries.

Track M&A activity that matters to you

Get real-time deal alerts, build buyer lists with AI, and access our full acquisition database. Start your free trial today.

Related Acquisition Pages