cybersecdirectory

AST acquisitions and funding

41 acquisitions of application security testing vendors since 2020 and 121 funding rounds since 2022 on record. The most active buyers are Snyk (3), Harness (2) and Synopsys (2). See the application security testing vendors in the directory.

41acquisitions
$4.2bnpaid in the 5 acquisitions with a disclosed price
Browse other categories

Showing 1 to 41 of 41

DateDealAmountSource
February 2026Endor Labs acquired Autonomous PlaneApplication security firm enhancing reachability across applications and container imagesUndisclosedReportvia SecurityWeek
November 2025Bugcrowd acquired Mayhem SecurityApplication security firm offering technology for finding and prioritising vulnerabilitiesUndisclosedReportvia SecurityWeek
September 2025UltraViolet Cyber acquired Black DuckApplication security testing services businessUndisclosedReportvia SecurityWeek
September 2025Harness acquired Qwiet AIAgentic AI-powered vulnerability detection and reachability analysis for application codeUndisclosedReportvia SecurityWeek
August 2025Invicti acquired KonduktoPioneer of application security posture management softwareUndisclosedReportvia SecurityWeek
August 2025Aikido Security acquired TragAI tool reviewing pull requests and flagging code quality issuesUndisclosedReportvia SecurityWeek
June 2025Security Compass acquired DeviciThreat modelling capabilities for secure software designUndisclosedReportvia SecurityWeek
June 2025AdaCore acquired CodeSecureApplication security testing including static analysis for embedded systemsUndisclosedReportvia SecurityWeek
February 2025Harness acquired TraceableApplication security company improving security for software applicationsUndisclosedReportvia SecurityWeek
January 2025Fenix24 acquired vArmourApplication security companyUndisclosedReportvia SecurityWeek
November 2024Snyk acquired ProbelyProvides dynamic application security testing and API security testing toolsUndisclosedReportvia SecurityWeek
October 2024Bubble acquired FluskProvides no-code security and monitoring tool for Bubble apps.UndisclosedReportvia SecurityWeek
August 2024CloudBees acquired LaunchableAI-augmented approach to quality assurance and software testingUndisclosedReportvia SecurityWeek
May 2024Clearlake Capital and Francisco Partners acquired SynopsysApplication security testing software provider$2.1bnReportvia SecurityWeek
March 2024GitLab acquired OxeyeIsraeli application security firm aiding static testing and software composition analysisUndisclosedReportvia SecurityWeek
March 2024Cycode acquired BearerProvides application security testing tools$10mReportvia SecurityWeek
December 2023Mend.io acquired Atom SecurityIsraeli company specialising in application securityUndisclosedReportvia SecurityWeek
September 2023Battery Ventures acquired GrammaTechApplication security testing software business, now relaunched as CodeSecureUndisclosedReportvia SecurityWeek
July 2023Dynatrace acquired RookoutCloud-native debugging tools provider based in IsraelUndisclosedReportvia SecurityWeek
June 2023Snyk acquired Enso SecurityApplication security posture management companyUndisclosedReportvia SecurityWeek
December 2022Veracode acquired Crashtest SecurityGerman developer of software security tools for dynamic application security testingUndisclosedReportvia SecurityWeek
October 2022Pradeo acquired YagaanFrench application security firm offering application source code testingUndisclosedReportvia SecurityWeek
May 2022Datadog acquired Hdiv SecurityApplication security testing firmUndisclosedReportvia SecurityWeek
April 2022Synopsys acquired White Hat SecurityProvides application security products and services$330mReportvia SecurityWeek
April 2022HackerOne acquired PullRequestProvides code review as a service for software teamsUndisclosedReportvia SecurityWeek
March 2022TA Associates acquired VeracodeVeracode provides a platform that identifies and fixes security flaws in software.UndisclosedReportvia SecurityWeek
February 2022WhiteSource acquired XanitizerProvides static application security testing toolsUndisclosedReportvia SecurityWeek
February 2022WhiteSource acquired DefenseCodeProvides static application security testing toolsUndisclosedReportvia SecurityWeek
February 2022ProArch acquired EnhopsSoftware testing and quality assurance, including security testing servicesUndisclosedReportvia SecurityWeek
February 2022Check Point acquired SpectralDeveloper security platform for cloud securityUndisclosedReportvia SecurityWeek
January 2022Orca Security acquired RapidSecWeb application security providerUndisclosedReportvia SecurityWeek
December 2021Aqua Security acquired ArgonSoftware development security firmUndisclosedReportvia SecurityWeek
October 2021Summit Partners acquired Invicti SecuritySells application security testing software$625mReportvia SecurityWeek
July 2021Fortinet acquired Sken.AiApplication security innovator supporting DevSecOpsUndisclosedReportvia Wikipedia
July 2021Aqua Security acquired tfsecA free tool that checks infrastructure code for weaknessesUndisclosedReportvia SecurityWeek
June 2021Coalfire acquired Denim GroupApplication security solutions providerUndisclosedReportvia SecurityWeek
March 2021Sonatype acquired MuseDevAnalyses developer pull requests for security, performance and reliability bugsUndisclosedReportvia SecurityWeek
September 2020Snyk acquired DeepCodeUndisclosedReportvia Wikipedia
August 2020LogPoint acquired Orange Cyberdefense GermanyA widely used SAP guarding tool from Orange Cyberdefense GermanyUndisclosedReportvia Cybersecurity Ventures
March 2020Hellman & Friedman acquired CheckmarxCheckmarx provides application security testing software that scans code for vulnerabilities.$1.1bnReportvia Cybersecurity Ventures
January 2020Synopsys acquired Tinfoil SecurityProvides dynamic application security testing and API testing solutionsUndisclosedReportvia Cybersecurity Ventures

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.