The number of cybersecurity-related merger and acquisition (M&A) announcements surged in May 2025, with 42 deals.
An analysis conducted by SecurityWeek shows that 405 cybersecurity-related mergers and acquisitions were announced in 2024. Check out the detailed report.
Here is a list of the most important cybersecurity M&A deals announced in May 2025:
Check Point has acquired Israel-based threat exposure and mitigation platform Verity, reportedly for over $100 million. Veriti’s capabilities, which include cross-vendor virtual patching and threat intelligence enforcement, will be integrated into the Check Point Infinity Platform as part of the Threat Exposure and Risk Management offering.
Security and application delivery firm F5 announced buying Fletch, a San Francisco-based company that leverages agentic AI to help organizations detect threats. Fletch’s technology will be integrated into the F5 Application Delivery and Security Platform, providing customers with deeper insights, real-time threat intelligence, and proactive security recommendations.
Fortinet has acquired Israel-based Suridata, reportedly for tens of millions of dollars. Suridata provides SaaS security solutions that will be added to Fortinet’s Unified SASE portfolio to enhance visibility, continuous monitoring, risk assessment, and policy enforcement.
Identity, device, and access management solutions provider JumpCloud has acquired VaultOne for its privileged access management (PAM) solutions. VaultOne’s PAM technology will be integrated into JumpCloud’s platform.
Keyfactor acquires InfoSec Global and CipherInsights
PKI and machine identity management solutions provider Keyfactor has announced two acquisitions: cryptographic posture management firm InfoSec Global, and CipherInsights, a cryptographic discovery solution by Quantum Xchange. InfoSec Global and CipherInsights enable Keyfactor to enhance its ability to identify, prioritize and remediate cryptographic risks.
Defense technology firm Leidos has acquired Kudu Dynamics, which helps the US government with full spectrum cyber operations, for $300 million. Kudu Dynamics enables Leidos to enhance offensive cyber capabilities, electromagnetic spectrum operations, and vulnerability research.
Lookout sells cloud security business to Fortra
Mobile security firm Lookout has sold its cloud security business to offensive and defensive cyber solutions provider Fortra, which owns the widely used Cobalt Strike pentesting tool. Fortra will acquire all assets, intellectual property, and personnel associated with the Lookout business. Lookout said the divestiture reflects its strategic focus on mobile endpoint security.
Cloud data security vendor Orca Security announced the acquisition of Opus Security, an Israeli startup that has developed technology for AI-powered cloud security orchestration and remediation.
Proofpoint acquires Hornetsecurity
Enterprise cybersecurity giant Proofpoint is acquiring Germany-based Hornetsecurity, a company specializing in Microsoft 365 security solutions, reportedly for $1 billion. Hornetsecurity provides Microsoft 365 security, email security, data protection, compliance, and security awareness solutions. Proofpoint said the acquisition enables it to boost human-centric security capabilities, particularly for SMBs.
Proofpoint also announced the acquisition of Nuclei, a company specializing in compliance archiving and data enrichment for workplace communications. With this deal, Proofpoint further enhances its digital communications governance (DCG) offering with capabilities to capture, retain, and analyze communications across workspace collaboration platforms.
Tenable acquires Apex Security
Tenable has acquired Israeli company Apex Security, reportedly for $105 million. Apex Security specializes in securing the AI attack surface and its technology will enable Tenable to expand its capabilities for detecting and assessing AI usage, including for governing usage, enforcing policies, and controlling exposure.
Zscaler plans to buy Denver-based managed detection and response (MDR) specialist Red Canary for $675 million. The deal adds technology for human monitoring and incident response on top of Zscaler’s zero trust cloud.
Other cybersecurity M&A deals announced in May 2025:
Arqit acquires Ampliphae’s technology IP
BCI acquires Trustlink Technologies
CXO acquires CIOsynergy, secureCISO and CFO.org events
Cyber Solutions acquires CleverTech
Five Tattva acquires major stake in Zeroday Ops Private Limited
Intelligent Technical Solutions acquires Black Breach
Limerston Capital acquires CyberCrowd
Qubika acquires Nitra Security
SeSa acquires majority stake of Delta Tecnologías de Información SL
SurgeONE.ai acquires MGL Consulting
Tyto Athene acquires StackArmor
Vipre Security acquires Forensic and Compliance Systems
VTG acquires Byte Systems and Tunuva Technologies
Related: Cybersecurity M&A Roundup: 23 Deals Announced in March 2025
Related: Cybersecurity M&A Roundup: 31 Deals Announced in April 2025
