Forty-one cybersecurity-related merger and acquisition (M&A) deals were announced in March 2023.
An analysis conducted by SecurityWeek shows that more than 450 cybersecurity-related mergers and acquisitions were announced in 2022.
Akamai has acquired UK-based Ondat, a company that specializes in cloud storage technology that can be used for running business-critical, stateful applications safely. The technology will help Akamai enhance its cloud computing offerings.
Altamira Technologies Corporation acquires VaST
Altamira Technologies Corporation has completed the acquisition of Virginia Systems & Technology (VaST). The deal will help Altamira expand its SIGINT capabilities. VaST’s cyber capabilities include network defense and exploitation.
Israel-based online protection provider ActiveFence has acquired UK-based Rewire, a company that specializes in developing AI for online safety. Rewire technology will help ActiveFence in better identifying harmful text-based content online.
Cuscal acquires majority stake in Basiq
Payments, banking and regulated data provider Cuscal is buying a majority stake in consumer data right (CDR) platform Basiq. Both companies are based in Australia. The acquisition helps Basiq expand its offering for fintechs.
Cherokee Federal acquires Criterion Systems
Cherokee Federal has announced the acquisition of IT and cybersecurity company Criterion Systems. Both companies provide solutions and services to the US government. The acquisition helps Cherokee expand its IT and cybersecurity services.
Networking giant Cisco has announced plans to acquire Israel-based cloud security firm Lightspin, reportedly for $200-$250 million. The news comes just weeks after Cisco announced buying cloud security firm Valtix.
CyberRisk Alliance acquires KNOW Identity conference
CyberRisk Alliance, which provides business intelligence and information services to the cybersecurity community, has acquired the KNOW Identity conference.
Dekra acquires Onward Security
Germany-based safety and security solutions and services provider Dekra has purchased Taiwan-based IoT and IIoT cybersecurity compliance company Onward Security. The acquisition enables Dekra to expand its portfolio and its presence in the APAC region.
HPE has bought cloud security company Axis Security to expand its edge-to-cloud security capabilities through a unified SASE solution. Axis’ platform will build on Aruba’s existing SD-WAN and network firewall offering.
Liquid Intelligent Technologies acquires Cysiv MEA
Mauritius-based IT and communications company Liquid Intelligent Technologies has acquired Egypt-based SOC provider and MSSP Cysiv MEA. The deal allows Liquid to boost its portfolio in Africa and the Middle East. Cysiv MEA will be rebranded as Liquid C2 following the acquisition.
Cyber advisory and solutions provider Optiv has acquired ClearShark, which provides cybersecurity and modernization technology to federal agencies. The goal is to create a federal sector powerhouse.
Mastercard acquires Baffin Bay Networks
Payment technology giant Mastercard has acquired Sweden-based threat protection provider Baffin Bay Networks to enhance its ability to defend customers against cyber threats.
Quadrant Private Equity acquires ZX, Quantum Security and Helix Security
Australian private equity firm Quadrant has acquired three cybersecurity firms based in New Zealand, reportedly paying between $40 million and $100 million for each. The acquired companies are ZX, Quantum Security and Helix Security, which provide roughly the same type of services, including security assessment, penetration testing, and training and certification.
Security operations heavyweight Rapid7 has announced a deal to acquire Israeli anti-ransomware startup Minerva Labs for $38 million. The acquisition is part of Rapid7’s plans to beef up its managed detection and response portfolio.
Rocket Software acquires Key Resources
Enterprise software developer Rocket Software has acquired Key Resources, which specializes in mainframe security and vulnerability identification and assessment. The deal helps Rocket expand its mainframe security capabilities.
ScalePad, a Canada-based provider of operational management solutions for MSPs, has announced the acquisition of ControlMap, a US-based firm that provides a governance, risk and compliance platform for MSPs. The acquisition helps ScalePad expand its offering.
Secure remote access software provider Splashtop has acquired Foxpass, which specializes in cloud-based, identity-centric network and server access solutions for IT and DevOps systems. Foxpass’ IAM platform will expand Splashtop’s security offering, but the Foxpass brand and product lines will remain intact.
Stefanini Group acquires Safeway Consultancy
Stefanini Group, a company that provides cybersecurity and other IT solutions, has announced buying Safeway Consultancy, a cybersecurity consulting firm that specializes in SOC services. Both companies are based in Brazil and the deal is part of Stefanini’s efforts to boost its cybersecurity services offering.
Stryve acquires majority share in SureDatum
Cybersecurity and private cloud company Stryve has acquired a majority stake in fintech firm SureDatum. Both companies are based in Ireland and the deal will help Stryve gain entry to the fintech sector and pursue its plan of becoming a major cloud services provider in Europe.
Summa Equity acquires Logpoint
Sweden-based investment company Summa Equity has acquired a majority stake in Logpoint, a Denmark-based firm that provides SIEM, SOAR, UEBA and endpoint security solutions. Summa said Logpoint will serve as the platform for building a European cybersecurity powerhouse.
ThreatLocker acquires HyperQube
Endpoint protection company ThreatLocker is acquiring assets of HyperQube, which provides virtualization technology that enables enterprises to build an exact copy of any infrastructure or network to determine how it responds to changes caused by software updates, new technologies, outages, or cyberattacks.
Technology & Strategy acquires Eximia
France-based engineering, IT and project management company Technology & Strategy (T&S) has acquired German automotive research and consulting firm Eximia, which specializes, among others, in automotive security. The deal enables T&S to expand its capabilities in the automotive area.
Israel-based company XM Cyber has acquired cloud cybersecurity detection and response firm Confluera in an effort to expand the capabilities of its cyber exposure management platform.
MSSP
SecurityWeek is tracking deals involving managed security services providers (MSSPs) and distributors separately. Here is a list of deals from March 2023:
Esprinet acquires Lidera Network
Fairdinkum Consulting acquires Warren Systems Group
Fulcrum IT Partners acquires Advizex
Interactive acquires Slipstream Cyber Security
Novatech acquires ACT Business Machines
Upstack acquires The Monaco Group and LinkSource
Volar Security merges with Unified Solutions
Related: Cybersecurity M&A Roundup: 35 Deals Announced in February 2023

Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.
More from Eduard Kovacs
- Apple Denies Helping US Government Hack Russian iPhones
- Zero-Day in MOVEit File Transfer Software Exploited to Steal Data From Organizations
- Russia Blames US Intelligence for iOS Zero-Click Attacks
- Cisco Acquiring Armorblox for Predictive and Generative AI Technology
- Moxa Patches MXsecurity Vulnerabilities That Could Be Exploited in OT Attacks
- Organizations Warned of Salesforce ‘Ghost Sites’ Exposing Sensitive Information
- Organizations Warned of Backdoor Feature in Hundreds of Gigabyte Motherboards
- Barracuda Zero-Day Exploited to Deliver Malware for Months Before Discovery
Latest News
- Enzo Biochem Ransomware Attack Exposes Information of 2.5M Individuals
- Apple Denies Helping US Government Hack Russian iPhones
- Zero-Day in MOVEit File Transfer Software Exploited to Steal Data From Organizations
- Google Temporarily Offering $180,000 for Full Chain Chrome Exploit
- Russia Blames US Intelligence for iOS Zero-Click Attacks
- Toyota Discloses New Data Breach Involving Vehicle, Customer Information
- Cisco Acquiring Armorblox for Predictive and Generative AI Technology
- Moxa Patches MXsecurity Vulnerabilities That Could Be Exploited in OT Attacks
