Thirty-six cybersecurity-related merger and acquisition (M&A) deals were announced in May 2022.
A SecurityWeek study showed that more than 430 cybersecurity mergers and acquisitions were announced in 2021.
Customer experience automation (CXA) firm ActiveCampaign has acquired transactional email service Postmark and its DMARC Digests email authentication and monitoring service. DMARC Digests was introduced in 2020 to help protect brands against email scammers.
Axiologic, a provider of IT solutions for the national security and intelligence communities, has acquired intelligence technology services firm Data Intelligence Technologies. The deal will help the government contractor expand its expertise in cybersecurity, artificial intelligence, and data science.
US-based cloud monitoring company Datadog has signed a definitive agreement to acquire Spain-based application security testing firm Hdiv Security. The acquisition will help Datadog extend its cloud security platform with additional application security capabilities.
Family Zone, an Australia-based company that provides cyber safety solutions for children, is buying all the shares of Spain-based parental controls company Qustodio for $52 million. Family Zone said the deal will enable it to significantly expand its capabilities and global footprint.
IT and customer experience solutions provider FourNet has acquired IT infrastructure and security company C>Ways. Both companies are based in the UK. FourNet said the deal will enable it to expand its networking and security portfolio.
Risk management company LexisNexis Risk Solutions announced buying BehavioSec, a firm that specializes in behavioral biometrics technology that can be used to establish identity trust and prevent fraud. BehavioSec solutions will become part of LexisNexis Risk Solutions’ Business Services group, enhancing its device and digital identity offerings.
Threat intelligence company LookingGlass has acquired business intelligence and strategic advisory firm Next5. The acquisition will help LookingGlass expand its cyber solutions offering. As part of the deal, Next5’s founder and CEO, Bryan Ware, will become the CEO of LookingGlass.
Managed IT and cybersecurity solutions provider Magna5 has announced buying StableNet, its fourth managed services acquisition as part of its growth strategy.
Canada-based digital forensics company Magnet Forensics has acquired the IP assets of UAE-based Comae Technologies, a cybersecurity firm specializing in cloud-based memory analysis for the recovery of evidence from volatile memory. Magnet Forensics will continue the development of Comae’s memory analysis platform and incorporate its capabilities into its own solutions.
Mobile device management company Techstep has acquired Crypho, a firm that has developed a secure end-to-end encrypted chat and collaboration application for enterprises. Both companies are based in Norway. The deal will help Techstep expand and strengthen its offering. The acquisition price is 10 million Norwegian krone (roughly USD1 million).
The Purple Guys has acquired Accelerate. Both companies provide managed IT services and The Purple Guys said the acquisition will help its strategic growth and enable it to provide “enhanced security solutions.”
Managed cloud and cybersecurity services provider Think|Stack announced buying Emergifi, which helps credit unions onboard to cloud technology solutions, as part of a strategic merger. Emergifi was acquired in exchange for equity and one board seat for Corporate Central Credit Union, which owned Emergifi.
TokenEx, a company that provides cloud tokenization and encryption for data security, has acquired Auric Systems International and its AuricVault cloud vaulting service. The deal will boost TokenEx’s expansion in Latin America and Africa.
Two Six Technologies, a national security contractor that provides cybersecurity and other technology solutions, has acquired Thresher Ventures, a company whose products can detect, analyze, and predict media manipulation by foreign governments.
IT consulting services provider UNS, Inc. has bought CyberPeak Solutions in an effort to expand its global cybersecurity practice with CyberPeak’s managed cybersecurity offering. UNS says the acquisition also helps it expand cloud-based support and MSSP opportunities.
US-based Aura, the owner of Hotspot Shield and other VPN services, has acquired Comparitech, a website that reviews VPNs and other security software. The deal has been valued at between $50 million and $100 million. VPNCompare.co.uk reported that Aura also appears to have acquired VPN comparison site ProPrivacy at some point, noting that these types of deals can lead to the review sites becoming less objective.
Private equity firm Carlyle is acquiring US defense contractor ManTech International Corporation in an all-cash deal valued at roughly $4.2 billion. ManTech provides various types of cybersecurity solutions to government agencies, including offensive cyber operations, defense, analytics, SOAR, hardening and resilience, training, and risk management and compliance.
Healthcare-focused cybersecurity, compliance and risk management company Clearwater Compliance is acquiring CynergisTek for $17.7 million. CynergisTek, which provides cybersecurity and compliance solutions to healthcare organizations, will become a privately held subsidiary of Clearwater. CynergisTek shares will no longer be listed on any public market.
Encryption-as-a-service company Cipherloc has announced buying virtual CISO (vCISO) services provider SideChannel in an all-stock deal. The acquisition will enable Cipherloc to expand its cybersecurity services and product offering. If the closing conditions are met, current SideChannel shareholders will receive 59.9 million shares of Cipherloc common stock and 100 shares of Cipherloc convertible preferred stock.
MSP/MSSP Coretelligent has bought Lighthouse Technology Partners, a company that also provides managed cybersecurity and other IT services. The acquisition helps Coretelligent enhance its capabilities.
F24, a Germany-based SaaS provider for incident and crisis management, is expanding its product portfolio with the acquisition of Swiss GRC company Business-DNA Solutions GmbH. The deal will also help F24 expand its knowledge base and technological expertise.
Germany-based FTCyber has acquired Bulgaria-based incident response and digital forensic services company Cyber Forensics. The acquisition helps FTCyber expand its portfolio and team.
HackEDU, which provides cybersecurity training and secure code development courses, has purchased application security training platform Security Journey. The deal enables HackEDU to broaden its offering.
Email cloud security and backup provider Hornetsecurity has announced buying security awareness training company IT-Seal. Both companies are based in Germany. The deal allows Hornetsecurity to add security awareness training to its portfolio.
Data protection company Jungle Disk has purchased ElephantDrive, which provides cloud backup and storage solutions for individuals and businesses. The deal marks Jungle Disk’s first move into the consumer market and extends the company’s suite of cloud backup offerings. ElephantDrive will operate as an independent business unit.
Investigation and risk consulting firm Kroll has acquired Crisp, a real-time risk intelligence company that protects customers from reputational damage, security threats and online harm. Kroll will use Crisp technology to expand its digital services capabilities. Crisp management will become a part of Kroll’s digital services leadership team.
Secure network and digital infrastructure provider Orro Group has acquired MSSP Riot Solutions in an effort to extend its cybersecurity offering. Both companies are based in Australia.
US government tech contractor Parsons has acquired Xator Corporation, which also provides solutions for US government agencies, in a deal valued at $400 million. Both companies provide cybersecurity services, and Parsons said the acquisition will help it enhance its technical capabilities, including in cyber.
Access orchestration solutions provider Pathlock has announced mergers with ERP data security firm Appsian, and Security Weaver, a company that provides governance, risk and compliance management (GRCM) software for SAP. In addition, the company announced the acquisitions of Belgium-based GRCM provider CSI Tools and Germany-based SAP security firm SAST Solutions.
secunet Security Networks, a company that provides cybersecurity solutions to governments and companies, has acquired managed Kubernetes and cloud services provider SysEleven for roughly €50 million ($53 million). The deal will help secunet expand its cloud and cloud security solutions. Both firms are based in Germany.
French defense and security giant Thales has entered an agreement with Sonae Investment Management to acquire Maxive Cybersecurity, the holding company that consolidates cybersecurity firms S21sec and Excellium Services. The €120 million ($128 million) deal will help Thales strengthen its detection and response, consulting, audit, and integration services.
Digital skills training and EdTech company ThriveDX (formerly HackerU) has acquired Swiss security awareness training and attack simulations firm Lucy Security. The deal will enable ThriveDX to expand its IT security training offerings for corporate customers.
MSSP Valeo Networks has acquired MSP Next I.T. The deal helps Valeo strengthen its cybersecurity, managed services, cloud solutions, and compliance capabilities. Next I.T. will continue to operate independently, but “A Valeo Networks Company” will be added to its name.