Funding/M&A

Cisco to Acquire WideField Security to Boost Splunk’s Agentic SOC

WideField will accelerate Agentic SOC capabilities by expanding the lens on threat investigation to include identity, credentials, sessions, and blast radius.

Cisco on Thursday announced an agreement to acquire identity lifecycle security company WideField Security to strengthen the capabilities of Splunk’s Agentic SOC. 

No financial details have been publicly disclosed. WideField raised more than $11 million in Series A funding last year. 

WideField has developed technology that enables organizations to discover human and non-human identities, map exposures across accounts and roles, and assess hygiene gaps. 

The company’s platform also enables users to detect misconfigurations in authentication policies and weak authentication paths, providing live session monitoring for real-time threat detection, and AI-powered behavioral analytics.

By integrating this into Splunk’s Agentic SOC and Cisco’s broader data fabric, the acquisition brings deeper identity and session intelligence into threat investigations, adding critical details around credentials, active sessions, and potential impact radius. 

This helps security teams better understand context for both human and AI-driven activity, and organizations gain the visibility needed to run autonomous AI systems securely at scale.

Advertisement. Scroll to continue reading.

This is Cisco’s third cybersecurity-related M&A deal of 2026, after Galileo and Astrix Security.

Cisco’s announcement came on the same day Accenture revealed a major OT cybersecurity push via acquisitions totaling $4.1 billion. The professional services giant is taking a majority stake in Dragos and fully acquiring runZero and NetRise.

SecurityWeek’s M&A tracker has cataloged approximately 190 deals to date in 2026.  

Related: SailPoint to Acquire Entro in Reported $200 Million Deal

Related: Cybersecurity M&A Roundup: 26 Deals Announced in May 2026

Related: 1Password Acquires Apono in Reported $250M-$300M Deal

Related Content

Vulnerabilities

Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws.

Funding/M&A

The acquisitions will add AI agent observability and automated AI security testing capabilities to the CrowdStrike Falcon platform.

Funding/M&A

Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint.

Artificial Intelligence

Cisco open sourced Project Quarry, a rule language for detecting AI agent attacks that only emerge across sequences of benign actions.

Malware & Threats

Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed.

Vulnerabilities

An exploited flaw in the Remote Access SSL VPN service lets unauthenticated attackers remotely force ASA and FTD firewalls to reload.

Vulnerabilities

Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.

Vulnerabilities

Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version