Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

M&A Tracker

Cybersecurity M&A Roundup: 28 Deals Announced in February 2025

Cybersecurity-related merger and acquisition (M&A) deals announced in February 2025. 

2025 cybersecurity M&A

Twenty-eight cybersecurity-related merger and acquisition (M&A) deals were announced in February 2025. 

An analysis conducted by SecurityWeek shows that 405 cybersecurity-related mergers and acquisitions were announced in 2024. Check out the detailed report

Here is a list of the most important cybersecurity M&A deals announced in February 2025:

A10 Networks acquires ThreatX Protect

Network security and application delivery solutions provider A10 Networks has acquired ThreatX Protect to expand its cybersecurity portfolio with web application and API protection (WAAP) capabilities. A10 has acquired the ThreatX brand and the TX Protect WaaP solution, and the remaining ThreatX assets will be rebranded as Run Security. 

AttackIQ acquires DeepSurface

Adversarial exposure validation company AttackIQ has acquired security posture management and vulnerability prioritization firm DeepSurface to expand its cybersecurity offering and extend its capabilities. 

CyberArk acquires Zilla Security

Advertisement. Scroll to continue reading.

CyberArk has acquired identity governance and administration (IGA) vendor Zilla Security for $165 million in cash. Zilla Security has developed tools to automate labor-intensive processes such as user provisioning and compliance reviews and CyberArk plans on folding these capabilities into its Identity Security Platform.

Deepwatch acquires Dassana

Managed enterprise cybersecurity platform provider Deepwatch has acquired security intelligence solutions firm Dassana. Dassana’s risk and threat exposure management technology will be integrated into Deepwatch’s platform to harvest threat insights that further enhance the productivity of security teams.

Drata to acquire SafeBase

Security and compliance automation solutions provider Drata has entered into a definitive agreement to acquire SafeBase, a company known for its trust center platform, in a $250 million deal. The Drata and SafeBase merger enables the creation of a comprehensive trust management platform that helps organizations enhance transparency and streamline self-serve security reviews, scale compliance and simplify audits, and enhance vendor risk management.

IonQ to acquire ID Quantique

Quantum computing company IonQ is in the process of buying ID Quantique (IDQ), a Swiss firm specializing in quantum safe networking and sensing, reportedly for $250 million. The deal would enable IonQ to expand its capabilities with quantum safe cryptography and quantum detection systems. 

Menlo Security to acquire Votiro

Enterprise browser security firm Menlo Security has bought data and file security solutions provider Votiro for $37.5 million. As a result of the deal, Menlo will provide a comprehensive workplace security solution that combines its browser security technology with Votiro’s data and file security platform. 

NCC Group sells Fox Crypto to CR Group

NCC Group has sold Fox Crypto, a Fox-IT business that develops high-assurance cryptographic products to secure and contain sensitive information, to Swedish cybersecurity company CR Group. The sale is part of a strategy to simplify NCC Group’s business and focus on growing the cybersecurity services business.

TAC Security acquires CyberScope

Vulnerability management firm TAC Security has acquired CyberScope, a Greece-based web3 security firm specializing in smart contract audits, crypto security audit and blockchain vulnerability assessments. The deal accelerates TAC Security’s global expansion, adding smart contract auditing to its vulnerability management portfolio and extending its European footprint.

Turn/River Capital to acquire SolarWinds 

Observability and IT management solutions giant SolarWinds has entered into a definitive agreement to be acquired by private equity firm Turn/River Capital for roughly $4.4 billion in cash. Once the deal has been completed, SolarWinds will become a privately held company.     

Other cybersecurity M&A deals announced in February 2025:

Bitdefender acquires BitShield division

Consortium acquires Metrics that Matter

Cyber Advisors acquires Wasatch I.T.

Data443 acquires Breezemail.ai

Digital Capital Partners acquires Govplace

Eason Technology acquires Hongkong Starlux Intelligent Technology

FusionTek acquires U.S. Resources, Inc.

Harness and Traceable merge

HeroDevs acquires Xeol

ITGL acquires Intuitive Systems & Networks

LexisNexis Risk Solutions acquires IDVerse

LRQA acquires Core Business Solutions 

Oryxalign acquires SDT Holdings

Perfios acquires Clari5

Positive Group acquires stake in Vba32

Thrive acquires Secured Network Services

Utilize acquires Access Information Security (AIS)

Worldpay to acquire Ravelin

Related: Cybersecurity M&A Roundup: 45 Deals Announced in January 2025

Related: Cybersecurity M&A Roundup: 37 Deals Announced in December 2024

Written By

Eduard Kovacs (@EduardKovacs) is a managing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this in-depth briefing on how to protect executives and the enterprises they lead from the growing convergence of digital, narrative, and physical attacks.

Register

Learn how integrating BAS and Automated Penetration Testing empowers security teams to quickly identify and validate threats, enabling prompt response and remediation.

Register

People on the Move

Cybersecurity firm Absolute Security announced Harold Rivas as its new CISO.

Simon Forster has been named the new General Manager of DNS security firm Quad9.

Cybersecurity training company Immersive has named Mark Schmitz as its new CEO.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.