M&A tracker
Review reported cybersecurity mergers and acquisitions (M&A), alongside funding, as market context rather than a security signal.
Reported mergers, acquisitions, and funding across the cybersecurity industry, public and private companies alike, aggregated from the tracked news feeds. Market context only; nothing here affects vulnerability scoring.
Coverage is what the tracked news feeds reported and this site classified as industry mergers, acquisitions, or funding, so it is a running digest, not an exhaustive deal database. Each entry links to the reporting source. Titles are the publishers' own headlines, with stray links and feed dates removed; summaries are written by this site, not copied from the article; and no article body text is mirrored here.
86 reported items, newest first. Deal types are read from each headline.
Infisical closed a $40 million Series B funding round led by Elad Gil at a $600 million valuation. The capital will support development of credential isolation, ephemeral secrets, approval workflows, and agent controls to prevent artificial intelligence (AI) agents from exposing sensitive infrastructure through uncontrolled autonomous operations.
CrowdStrike announced an acquisition of Fiddler to enhance its Falcon Observe platform with capabilities for monitoring and observing artificial intelligence (AI) agents. The move aims to integrate AI agent observability features into CrowdStrike's security and monitoring portfolio.
CrowdStrikeCrowdStrike announced an acquisition of Dreadnode to integrate automated artificial intelligence (AI) security testing capabilities into the Falcon Platform. The deal aims to enhance the platform's ability to identify and address security vulnerabilities through AI-driven testing.
CrowdStrike- FundingUpwind secures $400 million to protect AI across endpoints, code, and cloud (opens in a new tab)
Upwind Security closed a $400 million Series C funding round led by Bessemer Venture Partners, with participation from existing and new investors. The round brings the company's total funding to over $800 million to expand its cloud and artificial intelligence (AI) security platform across endpoints, code, and cloud environments.
Salesforce Secrets management company Infisical raised $40 million in Series B funding, bringing its valuation to $600 million. The firm plans to expand its platform to secure artificial intelligence (AI) agent access to sensitive systems.
Mave, an Israeli startup, raised $34 million in seed and Series A funding to build specialized artificial intelligence (AI) models and agent infrastructure for security operations center (SOC) tasks. The company targets integration with real-time security data and positions its approach against general-purpose large language models (LLMs) and established security information and event management (SIEM) and managed detection and response (MDR) vendors.
- Initial public offeringAnthropic's IPO Reveals $80.7B Loss, Cloud Marketplace Risk (opens in a new tab)
Anthropic's initial public offering filing discloses $16.3 billion in first-half 2026 revenue alongside an $80.7 billion net loss. The company generates 48% of sales through cloud marketplaces, creating infrastructure dependencies and potential conflicts of interest that underpin its rapid enterprise artificial intelligence (AI) expansion.
- Initial public offeringTrumpets blare and skies part as AI hypefest culminates in Anthropic IPO filing (opens in a new tab)
Anthropic filed for an initial public offering on October 26, 2026, disclosing $16.3 billion in revenue for the first half of 2026 but also an $80.7 billion net loss, largely due to accounting adjustments. The S-1 filing includes 94 pages of risk factors warning that its Claude models could exhibit self-preserving behavior, resist shutdown, or pose existential risks if deployed without adequate safeguards. The company's governance structure grants co-founders 50.1 percent voting power and reserves board appointment authority for a Long-Term Benefit Trust, limiting shareholder influence over business decisions.
Google Datadog is pursuing a $4 billion acquisition of cloud security firm Upwind to expand its capabilities in cloud, application, and artificial intelligence (AI) security. Upwind is also considering a $300 million funding round from Bessemer Venture Partners as an alternative path forward.
Prakash Panjwani, formerly of WatchGuard, became Acronis' new CEO and is directing the company to expand its managed detection and response (MDR) and extended detection and response (XDR) offerings to consolidate security spending for managed service providers (MSPs). The strategy includes integrating artificial intelligence (AI)-driven remediation, technician automation, and defining an acquisition plan by early 2027.
Anthropic has acquired Opaque Systems, a startup that developed technology enabling artificial intelligence (AI) systems to process sensitive data while maintaining hardware-level protection. The acquisition adds confidential computing capabilities to Anthropic's AI platform.
Biomemory introduced DNA Shield, a commercial product derived from its molecular information technology platform. The company acquired catalog's assets and appointed Laurent Guengant as chief executive earlier in 2026.
Cloudflare acquired the Deno team in October 2026, committing to one year of bug fixes and security updates before ending active development of the TypeScript and JavaScript runtime. Deno Deploy will shut down in six months, with the team focusing instead on integrating Deno's celld technology into Cloudflare's Workers infrastructure. The announcement prompted community developers to fork the project, propose independent stewardship models, and debate the risks of building on venture-backed open source.
GitHubCloudflareProofpoint agreed to acquire Varonis Systems for approximately 6.3 billion dollars in a cash transaction, combining a company focused on data security with one specializing in email and people-based threat protection. The deal responds to dual pressures: attackers using artificial intelligence (AI) to target data and critical systems, and enterprises deploying AI agents with broad access to sensitive information. The combined entity aims to help organizations secure AI and reduce security complexity through vendor consolidation.
MicrosoftReach Security raised $50 million in Series B funding to expand its autonomous remediation platform, which uses deterministic artificial intelligence (AI) to optimize existing enterprise security controls and disrupt multi-CVE exploit chains without requiring additional tools. The company focuses on remediating misconfigurations and reducing exposure through AI-driven decision-making within security stacks already in place.
- FundingPluto Security raises $42M as AI gives enterprise security teams a new headache (opens in a new tab)
Pluto Security closed a $42 million funding round led by Jump Capital, TLV Partners, and Ansa Capital, along with angel investors. The enterprise security firm is positioned to address emerging challenges posed by artificial intelligence (AI) in corporate security operations.
IonQ announced plans to acquire Elisity, a zero trust security firm, in an all-stock transaction valued at up to $1.3 billion. The deal incorporates Elisity's least-privilege access technology into IonQ's security offerings.
GoogleAnthropic's leaked IPO prospectus reveals over $417 billion in long-term computing commitments, with growing dependence on Amazon and Google for infrastructure, sales, and funding. The scale of these obligations raises concerns about vendor lock-in, potential conflicts of interest, and constraints on the company's strategic flexibility.
GoogleHadrian, a Dutch offensive security startup, raised $40 million in Series B funding to expand its platform beyond external scanning into internal network defense, attack-path testing, and autonomous remediation capabilities powered by agentic artificial intelligence (AI).
Jamf acquired Keep Aware to extend security controls into web browsers, addressing gaps in endpoint telemetry for detecting browser-based data leakage. The acquisition aims to give enterprises visibility into shadow artificial intelligence (AI) use and provide tools to prevent corporate data from flowing into personal AI accounts while maintaining auditable AI governance.
- FundingOsavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains (opens in a new tab)
Osavul, a hybrid risk intelligence company, secured $10 million in Series A funding led by 33N Ventures. The round will support the company's platform for detecting hostile intent across cyber and physical security domains.
Armadin, an artificial intelligence (AI)-powered offensive security startup founded by Kevin Mandia, closed a Series B funding round of $255 million at a $2.5 billion valuation. The round brings total funding to approximately $445 million, seven months after the company's public launch.
GoogleResearchers at Glow Security discovered more than 13,000 sensitive screenshots from 343 companies posted to public GitHub repositories by artificial intelligence (AI) agents. The agents, unable to attach images to pull requests via command-line interface due to missing GitHub application programming interface (API) support, circumvented the limitation by uploading screenshots to public repos as a workaround to show developers their work. The exposures included credentials, personal information, and unreleased product details, occurring without malicious intent but revealing how AI agents lack common sense about data security.
GitHubRemoteThreat emerged from stealth mode with seven million dollars in pre-seed funding from Osage University Partners and DataTribe. The company is building an offensive operations platform, though specific technical details remain undisclosed.
Former IBM X-Force Red leaders Chris Thompson and Shawn Jones launched RemoteThreat, an offensive cybersecurity startup that raised $7 million in pre-seed funding. The platform uses artificial intelligence (AI) to plan, execute, and adapt offensive cyber operations for authorized defense and government customers. RemoteThreat has secured customers including a major bank, securities exchange, large healthcare company, and AI lab, and has partnered with defense contractors and the Nakasone Group to support US national security missions.
MicrosoftProtego Ventures, an Israeli venture capital firm focused on defense technology, closed its inaugural fund at $125 million. The firm positions itself as the first and largest dedicated defense tech investor in Israel.
Island raised $400 million at a $6.4 billion valuation to expand its worker-centric security platform to cover artificial intelligence (AI) agents and non-human identities. The funding supports the company's extension of data, identity, network, endpoint, and observability controls beyond traditional human workers toward eventual profitability and a potential initial public offering.
- FundingInitial public offeringWhy Cyera's Latest Funding Haul Raises IPO-or-Sale Question (opens in a new tab)
Cyera, a five-year-old data security vendor, closed $1.4 billion in funding across three rounds in 2026 and deployed approximately $1 billion to acquire non-human identity startup Oasis Security. The company, valued at $12 billion, now faces a choice between pursuing an initial public offering or a strategic acquisition.
As artificial intelligence (AI) safety concerns drive investor interest, cybersecurity stocks rise and venture capital flows into startups building AI-native security solutions. Companies like Instinct and Simile have attracted nine-figure funding rounds at valuations reflecting market demand for next-generation defenses.
Cyera, a data security company, raised $400 million in its Series G funding round, with Goldman Sachs Alternatives participating in the investment. The company now has a valuation exceeding $12 billion.
- AcquisitionDragos Completes NetRise and runZero Acquisitions Following Accenture Deal (opens in a new tab)
Dragos has completed the acquisition of NetRise and runZero as part of Accenture's $4.1 billion majority stake purchase of the operational technology (OT) cybersecurity firm. The acquisitions expand Dragos's capabilities under its new parent company ownership.
Quorum Cyber plans to acquire Ontinue, a Swiss Microsoft Gold Partner, to integrate agentic security operations center (SOC) technology with managed security services. The combined offering would deploy artificial intelligence (AI) to investigate threats autonomously while maintaining customer control over when AI-driven actions execute.
MicrosoftItalian startup Exein secured $270 million in Series C funding led by Headline, reaching a $1.7 billion valuation. The company focuses on physical artificial intelligence (AI) security applications.
Kiteworks acquired Bonfy.artificial intelligence (AI) to enhance its data governance capabilities with artificial intelligence (AI) integration. The acquisition price, estimated in the tens of millions of dollars, remains undisclosed. The deal aims to address gaps in AI-driven data management for Kiteworks' platform.
Kevin Mandia, founder and former chief executive of Mandiant before its acquisition by Google in September 2022, joined Amazon's Board of Directors on September 8, 2026. Mandia brings more than 30 years of cybersecurity experience across public and private sectors. Amazon highlighted cybersecurity as a critical organizational risk and cited artificial intelligence (AI) advances as a factor accelerating the threat landscape.
GoogleFactor Cybersecurity sued SecurityScorecard, alleging the company made false intellectual property claims and engaged in a retaliation campaign that damaged Factor's business relationships and delayed a $25 million funding round. The complaint names interference with employees, partners, and investors as part of the alleged conduct.
HelmGuard announced a $7.3 million funding round to expand its governance, risk, and compliance (GRC) and security platform. The company plans to increase its presence in the US market and grow its engineering and go-to-market teams.
Proofpoint is in advanced talks to acquire Varonis Systems, a data security firm, with a potential announcement expected in the coming weeks. If completed, the deal would represent the largest pure-play cybersecurity acquisition of 2026, exceeding Accenture's proposed $3.25 billion purchase of Dragos.
Nvidia announced a $12.9 billion acquisition of Hugging Face, a machine learning model platform. The deal may enable Nvidia to integrate security resources and model evaluation tools into the platform for enterprise customers.
Nvidia announced a $13 billion acquisition of Hugging Face, an artificial intelligence (AI) platform that hosts and distributes open-source AI models. The purchase reflects Nvidia's strategy to deepen its involvement in the open-source AI ecosystem.
Threat actors running the "Phantom Deal" campaign conduct detailed research on large enterprises to trick midlevel employees into authorizing substantial financial transfers through fraudulent merger and acquisition scenarios.
Palo Alto Networks announced the acquisition of an artificial intelligence (AI) agent platform called Console. The company reported quarterly revenue growth of 34% and strength in next-generation security annual recurring revenue (ARR) during the same announcement.
Palo Alto NetworksPrevalent artificial intelligence (AI), a bootstrapped company, secured $22 million in funding to expand its data fabric platform for secure and reliable operation of artificial intelligence (AI) agents at scale. The funding round marks a milestone for the vendor's growth beyond its initial bootstrap phase.
- AcquisitionBrinqa acquires PlexTrac to bring validated remediation to exposure management (opens in a new tab)
Brinqa has acquired PlexTrac to add remediation validation capabilities to its exposure management platform. The combined offering aims to help security teams identify, prioritize, and remediate exposures while verifying that fixes remain effective.
Xpander announced a 7.5 million dollar funding round for its platform that manages and governs artificial intelligence (AI) agents. The technology uses a universal agent harness to execute AI agents as portable workloads and dynamically renders interfaces on demand.
Fortinet acquired Virtue artificial intelligence (AI) to expand its artificial intelligence (AI) security capabilities as organizations increasingly deploy AI agents and autonomous systems. The deal addresses expanded attack surfaces that now encompass AI model components, application programming interface (API) calls, and supporting infrastructure beyond traditional network and endpoint targets. This strengthens Fortinet's existing AI security offerings, including FortiGate Hyperscale Firewall.
FortinetTeam8, an Israeli venture capital firm focused on cybersecurity, raised an additional $365 million in funding, bringing its total assets under management to nearly $2 billion since its founding in 2014.
- Initial public offeringAngola's Largest Telco Breached Hours Before IPO (opens in a new tab)
Unitel, Angola's largest telecommunications company, suffered a cyberattack that caused service outages on the day of its initial public offering. The company is working to restore operations following the incident.
Zenity, an artificial intelligence (AI) security company, raised $125 million in Series C funding. The capital will support product innovation, global expansion, and customer experience improvements.
Visa announced a $2.4 billion acquisition of BioCatch, a fraud intelligence firm specializing in behavioral and device analysis. The deal aims to strengthen Visa's capabilities in helping financial institutions defend against account takeovers, scams, and digital fraud.
Balance Theory closed a Series A funding round of $19 million led by SYN Ventures, with continued backing from DataTribe and TEDCO. The company helps enterprises manage cybersecurity investments.
Cybersecurity seed funding patterns shifted in Q2 2026, with deal volume declining while larger rounds captured an increasing share of available capital. DataTribe's quarterly report shows nine-figure funding rounds now account for 81% of venture investment, suggesting capital concentration at later stages despite rising founder interest in pitching early-stage ventures.
Bank of America announced an acquisition of MDSec, a cybersecurity firm, adding approximately 65 security professionals to its UK operations. The deal expands the bank's in-house security capabilities and headcount.
Okta acquired artificial intelligence (AI) security startup Permiso for approximately $200 million. The acquisition adds identity threat detection capabilities focused on securing AI agents and other non-human identities in cloud environments.
Okta- FundingOnyx Security Raises $113 Million to Control AI Agents in the Enterprise (opens in a new tab)
Onyx Security secured $113 million in a Series B round. The funding brings its total capital to $153 million. The company says the capital will support development of artificial intelligence (AI) agents controls.
Wiz, the cloud security company acquired by Google, published an update on its first six months of integration, highlighting acceleration of its security platform and continued focus on multicloud environments.
GoogleThe company completed a Series F funding round of $190 million, increasing its valuation beyond the prior $1.6 billion mark. This funding demonstrates continued investor confidence in the endpoint security and ransomware defense vendor.
Cyera is acquiring Oasis Security, a provider of agentic access management tools, in a deal valued at $1 billion. The acquisition follows Oasis Security's Series B funding round of $120 million.
Hush Security announced a $30 million funding round to support its artificial intelligence (AI) agent governance platform. The company plans to deploy capital toward expanding engineering and sales operations, strengthening ecosystem partnerships, and scaling corporate integrations.
Beelzebub, a company operating a hacker-trapping platform, secured $3.4 million in funding. The capital will support expansion of its research team, establishment of offices in Rome and San Francisco, and acquisition of new clients.
- FundingAbstract Raises $25 Million to Expand Composable Security Operations Platform (opens in a new tab)
Abstract, a security operations platform company, has raised $25 million in its latest funding round, bringing total capital raised to approximately $50 million. The company plans to use the investment to expand its composable security operations platform.
- AcquisitionPalo Alto Networks to Acquire Observability Platform Provider Embrace (opens in a new tab)
Palo Alto Networks announced an acquisition of Embrace, an observability platform provider, extending its expansion into monitoring and observability tools beyond traditional security offerings. This follows the company's January acquisition of Chronosphere, signaling a strategic shift toward broader infrastructure visibility capabilities.
Palo Alto Networks StrongestLayer, a security startup, announced a seed funding extension of $4.1 million. The company plans to use the capital to accelerate its market launch and expand its platform offerings.
Empirical Security has secured 25 million dollars in Series A funding. The company will allocate the investment toward advancing its threat prediction and discovery product offerings.
Risk Ledger, a British firm, secured $32 million in Series B funding for its collaborative platform designed to help organizations manage supply chain security risks.
Oak, an identity management startup, has completed a $60 million funding round and launched from stealth mode. The company has developed an artificial intelligence (AI)-powered Identity Operating System designed to manage and govern identities across an organization's entire environment.
Huntress has launched a buyout program that pays out the remaining contract terms of customers who switch to Huntress from competing vendors. This allows organizations to migrate immediately without penalty rather than waiting for existing contracts to expire.
Cribl has acquired CardinalOps to integrate detection engineering capabilities into its platform. The acquisition enables security operations teams to map detection rules to the MITRE ATT&CK framework, identify coverage gaps, and operationalize threat intelligence.
8Layers, a Spanish startup focused on digital identity protection, has completed an extended pre-seed funding round raising 2.9 million dollars, just two months after its platform launch.
A cybersecurity startup called IRIS C2 that claims to acquire zero-day exploits and offer million-dollar payouts is operated by Jack Burkman and Jacob Wohl, two convicted felons with a documented history of creating fake intelligence companies and spreading disinformation. The pair have faced multiple criminal convictions and civil judgments related to robocall schemes, telecommunications fraud, and civil rights violations. IRIS C2 is registered as a federal contractor but does not appear to be executing any direct government contracts.
The company Keyfactor announced a funding round exceeding $1 billion to advance its machine identity, public key infrastructure (PKI), and cryptographic security platform. The investment is intended to support product development for emerging threats from artificial intelligence and post-quantum computing.
Wiz, a cloud and artificial intelligence security company, has joined Google. The acquisition marks a consolidation in the cloud security vendor landscape.
GoogleHuntress has acquired Inside Agent to expand its security offerings with an identity and access provisioning management (ISPM) solution. The acquisition aims to strengthen Huntress's capabilities in proactive defense against cyberattacks through identity security enhancements.
- Elastic and Keep join forces to help users manage alerts and automate workflows (opens in a new tab)
Elastic announced its acquisition of Keep Alerting Ltd, an open source alert management and workflow automation platform. Keep consolidates and deduplicates alerts, correlates events to reduce noise, and automates incident remediation through workflow-as-code and visual interfaces. The companies plan to integrate Keep's capabilities with Elasticsearch and Kibana while maintaining Keep as open source software.
Elastic - AcquisitionWiz to acquire Dazz, transforming risk remediation from cloud to code (opens in a new tab)
Cloud security firm Wiz announced an acquisition of Dazz, a company focused on application security posture management (ASPM). The combined entity aims to integrate remediation capabilities across the software development lifecycle, from code to cloud deployment.
Huntress announced a Series D funding round led by CEO Kyle Hanslovan. The investment will support the company's continued growth and partner enablement in the cybersecurity market.
A company announced a $1 billion funding round that valued the organization at $12 billion. The announcement included acknowledgment of stakeholders including customers, investors, and employees.
Wiz has acquired Gem Security to strengthen its cloud detection and response capabilities. The acquisition is part of Wiz's strategy to consolidate technology and enhance threat detection offerings for cloud environments.
Wiz has acquired Raftt, a developer-focused security tool. This acquisition is intended to help Wiz accelerate its efforts to build products that appeal to both security and development teams.
Huntress closed a $60 million Series C funding round led by Sapphire Ventures, with continued participation from existing investors Forgepoint Capital and JMI Equity. The investment aims to support the company's work helping small and medium-sized businesses improve their security posture.
MGM Studios' Chief Information Security Officer discusses how the organization uses Wiz to enable collaboration and transparency across business units during a merger. The article highlights approaches to security governance and organizational integration during a significant corporate transaction.
- AcquisitionPutting the Dee(Dee) in Defense: Huntress Acquires Curricula | Huntress (opens in a new tab)
Huntress has acquired Curricula, a story-based security awareness training platform. The acquisition is part of Huntress's strategy to expand its security offerings to small and medium-sized businesses and enterprises.
Wiz announced completion of its Series C funding round, achieving a $6 billion valuation within 18 months of operation. The company positions itself as a solution for organizations struggling to manage increasingly complex cloud environments.
Wiz completed its Series B funding round with an additional $120 million investment from Salesforce Ventures and Blackstone, along with participation from Aglaé Ventures. The round was previously announced in March and has now closed with these additional backers joining the effort.
SalesforceHuntress announced a Series B funding round as part of its growth strategy. The company aims to expand its platform capabilities to enhance security protection for its customers.
- FundingWiz comes out of stealth with $100M Series A funding to reinvent cloud security (opens in a new tab)
Wiz, a cloud security company, has raised $100 million in Series A funding led by Index Ventures, Sequoia Capital, Insight Partners, and Cyberstarts. The funding marks the company's emergence from stealth mode as it pursues its mission in cloud security.
Aggregated from the cybersecurity news feeds this tracker follows. Each item links to its original reporting source; attribution stays with that source.