Security Experts:

Cybersecurity M&A Roundup: 42 Deals Announced in April 2022

Cybersecurity M&A roundup for April 2022

Forty-two cybersecurity-related merger and acquisition (M&A) deals were announced in April 2022.

A SecurityWeek study showed that more than 430 cybersecurity mergers and acquisitions were announced in 2021.

April 1-15

Airbus Defence and Space acquires DSI Datensicherheit

Airbus Defence and Space has acquired Germany-based DSI Datensicherheit (DSI DS), a company that specializes in cryptography for space applications. The acquisition will help Airbus strengthen its cryptography capabilities and enhance the development of end-to-end secure systems. DSI DS will be fully owned by Airbus and it will operate under the name Aerospace Data Security.

Airiam acquires Syntervision and Transcendent

Airiam, a newly formed managed IT and cybersecurity services provider, has acquired IT and cybersecurity company Syntervision, as well as enterprise asset management and logistics software provider Transcendent. Airiam aims to provide managed IT and cybersecurity services to SMEs. All three companies are based in the United States.

AMD acquires Pensando

Chip giant AMD has acquired Pensando Systems, a company that specializes in distributed computing for cloud, computer, networking, storage and security services. AMD is paying roughly $1.9 billion for Pensando. The Pensando team will join AMD’s Data Center Solutions and it will continue executing their product and technology roadmaps. When the acquisition was announced, Pensando customers such as Goldman Sachs, HPE, Microsoft and Oracle praised the company for its security services.

CWSI acquires BLAUD

Ireland-based mobile and cloud security company CWSI has acquired Netherlands-based mobility and security firm BLAUD. BLAUD will become a wholly owned subsidiary of CWSI, helping the company’s European expansion in the cloud and mobile security market.

ERC merges with Oasis Systems

Brightstar Capital Partners company ERC is merging with Oasis Systems into ERC-Oasis. The goal is to scale and expand engineering, cybersecurity and technology consulting solutions for the aerospace and defense communities.

HelpSystems acquires Terranova Security

Cybersecurity and automation software firm HelpSystems has announced buying another company, Canada-based phishing simulation and security awareness training provider Terranova Security. The deal enables HelpSystems to expand its security suite with awareness training.

Imprivata acquires SecureLink

Imprivata, a provider of digital identity solutions for mission- and life-critical industries, has purchased SecureLink, which specializes in access management for critical systems. The combination of the two companies enables them to deliver a platform for organizations to manage and secure all enterprise and third-party identities.

Innominds acquires Nymi

Software product engineering services company Innominds has announced acquiring Nymi, a Canada-based firm that has developed a secure wearable that enables users to connect to their workplace using contactless and passwordless technology. Nymi will become a wholly owned subsidiary of Innominds and it will continue to operate independently.

Inframark acquires BLTI

Water infrastructure operations company Inframark has announced buying industrial automation solutions provider BLTI. BLTI will join Inframark’s SCADA division and it will operate as an autonomous business unit. BLTI and the combined SCADA division will provide automation and cybersecurity solutions to facilities in the water and wastewater industry.

Kaseya acquires Datto

Kaseya is acquiring Datto for $6.2 billion in cash as part of a transaction that will be funded by an equity consortium led by Insight Partners. Both Kaseya and Datto provide IT management and security to managed service providers (MSPs). Kaseya said it will continue to maintain Datto's brand, products, and services following the deal.

KKR acquires Barracuda Networks

Investment giant KKR has agreed to acquire email, web and network security solutions provider Barracuda Networks from private equity firm Thoma Bravo in a deal reportedly valued at nearly $4 billion. Thoma Bravo took Barracuda private in a $1.6 billion deal completed in February 2018.

KPMG acquires Fortica

Professional services giant KPMG has announced the acquisition of Canada-based cloud security company Fortica. The deal will help KPMG reinforce its cloud security presence in the Quebec region.

Nuvias Group acquires NetSafe

UK-based IT solutions distributor Nuvias Group has acquired Romania-based NetSafe Solutions, which specializes in the distribution of security, networking, wireless, MDM, storage and cloud security solutions. The deal helps Nuvias expand its portfolio and widen its coverage in Eastern Europe.

Omega Systems merges with ACE IT

MSP/MSSP Omega Systems has merged with IT services provider ACE IT. The deal will help Omega expand its portfolio. In terms of cybersecurity, ACE IT provides risk management, auditing, penetration testing, and email security services.

Perforce Software acquires Puppet

Software development tools provider Perforce Software has acquired DevOps platform Puppet. Perforce said Puppet extends its portfolio with new capabilities that enable DevOps teams to manage and secure their critical infrastructure.

Proton acquires SimpleLogin

Swiss privacy solutions provider Proton has acquired France-based open source anonymous email service SimpleLogin. SimpleLogin, which becomes a complementary ProtonMail service, has been used by many ProtonMail users to prevent spammers from obtaining their email addresses. SimpleLogin will also continue to function as a separate service.

Red Lion Controls acquires MB connect line

Industrial automation and networking company Red Lion Controls announced the acquisition of MB connect line, a German firm that specializes in secure remote access, industrial IoT, and industrial security services. The deal will enable Red Lion Controls to expand its secure remote access offering. MB connect line will continue to expand its portfolio of solutions.

SilverSky acquires Cybraics

MDR company SilverSky has completed the acquisition of Cybraics, whose AI/ML-based behavioral analytics technology will help it enhance its threat hunting capabilities. In addition, the deal will help SilverSky expand its customer base in the federal market.

SysGroup acquires Truststream Security Solutions

England-based managed IT, cybersecurity and cloud hosting services provider SysGroup has acquired Scotland-based managed security services provider (MSSP) Truststream Security Solutions for up to £8 million (roughly $10.4 million). The deal helps SysGroup strengthen its presence in the UK and extend its reach into Scotland.

Thoma Bravo acquires SailPoint

Private equity firm Thoma Bravo is acquiring identity and access management firm SailPoint in a $6.9 billion cash deal. SailPoint will become a private company following the acquisition.

Two Six Technologies acquires River Loop Security

Government contractor Two Six Technologies has announced the acquisition of River Loop Security, which specializes in cybersecurity and embedded systems. The acquisition helps Two Six enhance its cybersecurity capabilities.

Turn/River Capital acquires Tufin

Security policy management firm Tufin has agreed to be acquired by investment firm Turn/River Capital for approximately $570 million in cash. The deal value could spike higher, as the agreement includes a 30-day “go-shop” period in which Tufin can receive other acquisition proposals.

Wyntec acquires Layer 8 Security

Managed services provider Wyntec has acquired security awareness training firm Layer 8 Security. Both companies are based in Australia. The acquisition will help Wyntec expand its cybersecurity offering.

April 16-30

 ADACOM acquires Netbull

ADACOM has acquired Netbull for €6.3 million ($6.6 million). Both companies are based in Greece and they both offer a wide range of managed cybersecurity services

Bright Security acquires We Hack Purple

Application security company Bright Security has acquired We Hack Purple, a company that specializes in application security, DevSecOps and cloud security training. We Hack Purple will continue its current operations as part of Bright Security. The acquisition was announced as Tanya Janca, founder of We Hack Purple, joined Bright Security as Director of Developer Relations & Community.

Coretelligent acquires Chateaux

Managed IT, security, and cloud management services provider Coretelligent has acquired tech firm Chateaux, which, among others, also provides cybersecurity services. Coretelligent said Chateaux complements its own services and solutions, and the acquisition will enable it to expand its offering.

CTI Technology acquires MacHero

Managed IT services provider CTI Technology has purchased MacHero, a company that provides Apple-centric technology consulting and managed IT services to businesses. CTI said the deal will help it expand its managed services capabilities, particularly in cybersecurity.

Devo acquires Kognos

Logging and security analytics company Devo has acquired threat hunting firm Kognos. The goal is to deliver an “autonomous SOC,” with Devo collecting data from the entire attack surface and feeding it into the Kognos AI engine.

Fenergo acquires Sentinels

Ireland-based KYC and client lifecycle management solutions provider Fenergo has acquired Netherlands-based Sentinels, which specializes in anti-money laundering (AML) transaction monitoring services. The deal will enable Fenergo to offer end-to-end client risk management and financial crime compliance services.

HackerOne acquires PullRequest

Bug bounty platform HackerOne announced the acquisition of code-review-as-a-service company PullRequest. HackerOne will use PullRequest technology and code reviewers to expand its offering.

Meriplex acquires Cyberian Technologies

Meriplex has bought the assets of Cyberian Technologies. Both companies provide managed IT and cybersecurity services. Meriplex is strategically acquiring managed services providers in an effort to become the leading MSP/MSSP in the United States.

Metrika Tech Fund acquires majority stake in Abissi

Italian private equity firm Metrika Tech Fund has acquired a 70% stake in Abissi, an Italian cybersecurity company that provides threat intelligence, testing, application security, IoT security, forensics, and compliance services.

Rimstorm acquires Elevative Networks

Rimstorm has acquired Elevative Networks. Both companies offer managed IT and cybersecurity services. The deal will help Rimstorm, which provides cybersecurity solutions to government contractors, expand its managed services portfolio.

Sabanci Group acquires majority stake in Radiflow

Turkey-based industrial and financial conglomerate Sabanci Group has signed an agreement to acquire a majority stake in operational technology (OT) cybersecurity company Radiflow for $45 million. Sabanci Group is initially buying a 51% stake in Radiflow, and it plans on fully acquiring the company in 2025.

Signicat acquires Sphonic

Norway-based identity solutions provider Signicat has announced buying UK-based Sphonic, which specializes in identity, fraud and AML orchestration technology. The deal helps Signicat expand its capabilities. In the short term, Sphonic will be a separate business entity, named “Sphonic, a Signicat company,” but the plan is to fully integrate it into Signicat.

Sophos acquires SOC.OS

Cybersecurity company Sophos has bought SOC.OS, a BAE Systems Digital Intelligence spinout that has developed a SaaS tool for automating alert triage for security operations centers (SOCs). Both companies are based in the UK. The deal will enable Sophos to expand its managed threat response (MTR) and extended detection and response (XDR) capabilities.

Synopsys acquires White Hat Security

Electronic design automation powerhouse Synopsys is expanding its reach into the cybersecurity business with the acquisition of application security firm White Hat Security for $330 million in cash. The transaction will allow Synopsys to expand its portfolio and SaaS offerings.

SysGroup acquires Orchard Computers

Managed IT, cybersecurity and cloud hosting services provider SysGroup has acquired MSP/MSSP Orchard Computers. Both companies are based in the UK. The deal — the second announced by SysGroup in April 2022 — will help the company boost its service offering.

Tenable acquires Bit Discovery

Tenable has announced plans to spend $45 million in cash to acquire attack surface management software startup Bit Discovery. Tenable will leverage Bit Discovery’s products across its entire portfolio – from enterprise vulnerability management (VM) to Nessus, from cloud to operational technology (OT) to identity.

Utimaco acquires Celltick

Utimaco, a cybersecurity and compliance solutions provider with headquarters in Germany and the US, has acquired Celltick, a US-based company that specializes in public warning systems and cell broadcast-based products. The deal will enable Utimaco to expand its offering.

Vector Capital acquires majority stake in WatchGuard Technologies

Private equity firm Vector Capital has announced acquiring a majority stake in network security company WatchGuard Technologies. Vector Capital becomes the majority shareholder after acquiring interests previously owned by Francisco Partners and other investors.

*content and headline updated on May 2 to add six deals

Related: Cybersecurity M&A Roundup: 40 Deals Announced in March 2022

view counter
Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.