AST acquisitions and funding
41 acquisitions of application security testing vendors since 2020 and 121 funding rounds since 2022 on record. The most active buyers are Snyk (3), Harness (2) and Synopsys (2). See the application security testing vendors in the directory.
Browse other categories
- Managed security services 466
- GRC and compliance automation 230
- AI and LLM security 217
- Security consulting and vCISO 213
- Fraud and payment fraud prevention 165
- Identity and access management 159
- Encryption and key management 156
- Threat intelligence 148
- Security awareness and human risk 138
- Attack surface management 112
Deals
Showing 1 to 9 of 9
| Date | Deal | Amount | Source |
|---|---|---|---|
| November 2025 | Bugcrowd acquired Mayhem SecurityApplication security firm offering technology for finding and prioritising vulnerabilities | Undisclosed | Report on Bugcrowd buying Mayhem Security, November 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2025 | UltraViolet Cyber acquired Black DuckApplication security testing services business | Undisclosed | Report on UltraViolet Cyber buying Black Duck, September 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2025 | Harness acquired Qwiet AIAgentic AI-powered vulnerability detection and reachability analysis for application code | Undisclosed | Report on Harness buying Qwiet AI, September 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| August 2025 | Invicti acquired KonduktoPioneer of application security posture management software | Undisclosed | Report on Invicti buying Kondukto, August 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| August 2025 | Aikido Security acquired TragAI tool reviewing pull requests and flagging code quality issues | Undisclosed | Report on Aikido Security buying Trag, August 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2025 | Security Compass acquired DeviciThreat modelling capabilities for secure software design | Undisclosed | Report on Security Compass buying Devici, June 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2025 | AdaCore acquired CodeSecureApplication security testing including static analysis for embedded systems | Undisclosed | Report on AdaCore buying CodeSecure, June 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2025 | Harness acquired TraceableApplication security company improving security for software applications | Undisclosed | Report on Harness buying Traceable, February 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2025 | Fenix24 acquired vArmourApplication security company | Undisclosed | Report on Fenix24 buying vArmour, January 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.