cybersecdirectory

ASM acquisitions and funding

34 acquisitions of attack surface management vendors since 2020 and 78 funding rounds since 2022 on record. The most active buyer is CrowdStrike (2). See the attack surface management vendors in the directory.

34acquisitions
$1.6bnpaid in the 6 acquisitions with a disclosed price
Browse other categories

Deals

Showing 1 to 34 of 34

DateDealAmountSource
September 2026Dragos acquired runZerorunZero provides exposure management software that discovers and profiles assets across IT, OT, IoT, cloud and mobile networks.UndisclosedReport on Dragos buying runZero, September 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
July 2026CrowdStrike acquired XM CyberIts protected inventions and code deal with finding weaknesses and mapping how intruders moveUndisclosedReport on CrowdStrike buying XM Cyber, July 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
June 2026Accenture acquired runZerorunZero provides exposure management software that discovers and profiles assets across IT, OT, IoT, cloud and mobile networks.UndisclosedReport on Accenture buying runZero, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
February 2026Check Point acquired CyclopsBolsters risk tracking by finding assets using AIUndisclosedReport on Check Point buying Cyclops, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
February 2026Arctic Wolf acquired Sevco SecurityUS cybersecurity company providing attack surface management capabilitiesUndisclosedReport on Arctic Wolf buying Sevco Security, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
November 2025SAFE acquired BalbixSpecialises in continuous threat exposure managementUndisclosedReport on SAFE buying Balbix, November 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
July 2025Lansweeper acquired RedjackDiscovers assets and maps application dependencies using network traffic analysisUndisclosedReport on Lansweeper buying Redjack, July 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
June 2025Data443 acquired TacitRedA hosted tool for managing the outside attack surfaceUndisclosedReport on Data443 buying TacitRed, June 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
May 2025CPX acquired SpiderSilkCyber-AI startup offering exposure management platform and autonomous SOC AI agentsUndisclosedReport on CPX buying SpiderSilk, May 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
April 2025Fenix24 acquired appNoviMaps the enterprise attack surfaceUndisclosedReport on Fenix24 buying appNovi, April 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
February 2025Deepwatch acquired DassanaSupplies technology for handling danger and weakness exposureUndisclosedReport on Deepwatch buying Dassana, February 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
January 2025Searchlight Cyber acquired AssetnoteAustralian firm selling attack surface management technology$62mReport on Searchlight Cyber buying Assetnote, January 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
December 2024CyberProof acquired Interpres SecurityContinuous threat exposure management and security control assessmentUndisclosedReport on CyberProof buying Interpres Security, December 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
November 2024Insight Partners acquired DetectifyUndisclosedReport on Insight Partners buying Detectify, November 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
July 2024Rapid7 acquired Noetic CyberCyber asset attack surface management, giving visibility of customer environmentsUndisclosedReport on Rapid7 buying Noetic Cyber, July 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
June 2024NetSPI acquired Hubble TechnologyProvides cyber asset attack surface management and security posture managementUndisclosedReport on NetSPI buying Hubble Technology, June 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
May 2024Bugcrowd acquired InformerUK provider of external attack surface management and penetration testing servicesUndisclosedReport on Bugcrowd buying Informer, May 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
March 2024Flare acquired ForetraceProvides a threat exposure management engineUndisclosedReport on Flare buying Foretrace, March 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
November 2023Boltonshield acquired ScanmeterExternal attack surface management firm based in SwitzerlandUndisclosedReport on Boltonshield buying Scanmeter, November 2023 (opens in a new tab)via SecurityWeek (opens in a new tab)
September 2023Stratascale acquired Vector0Provides attack surface management technology and servicesUndisclosedReport on Stratascale buying Vector0, September 2023 (opens in a new tab)via SecurityWeek (opens in a new tab)
June 2023Outpost24 acquired SweepaticCreates an external attack surface management platformUndisclosedReport on Outpost24 buying Sweepatic, June 2023 (opens in a new tab)via SecurityWeek (opens in a new tab)
November 2022Boxx Insurance acquired TemplarbitAmerican business offering automatic exposure mapping and supplier danger checksUndisclosedReport on Boxx Insurance buying Templarbit, November 2022 (opens in a new tab)via SecurityWeek (opens in a new tab)
October 2022Red Sift acquired HardenizeUK web security firm with attack surface management capabilitiesUndisclosedReport on Red Sift buying Hardenize, October 2022 (opens in a new tab)via SecurityWeek (opens in a new tab)
September 2022CrowdStrike acquired ReposifyStartup providing external attack surface managementUndisclosedReport on CrowdStrike buying Reposify, September 2022 (opens in a new tab)via SecurityWeek (opens in a new tab)
June 2022IBM acquired RandoriAttack surface management companyUndisclosedReport on IBM buying Randori, June 2022 (opens in a new tab)via SecurityWeek (opens in a new tab)
April 2022Tenable acquired Bit DiscoveryDevelops attack surface management software$45mReport on Tenable buying Bit Discovery, April 2022 (opens in a new tab)via SecurityWeek (opens in a new tab)
February 2022Darktrace acquired CybersprintAttack surface management company$53.7mReport on Darktrace buying Cybersprint, February 2022 (opens in a new tab)via SecurityWeek (opens in a new tab)
January 2022Recorded Future acquired SecurityTrailsHelps organisations track internet-facing assets$65mReport on Recorded Future buying SecurityTrails, January 2022 (opens in a new tab)via SecurityWeek (opens in a new tab)
November 2021Team Cymru acquired AmplicyProvides threat surface managementUndisclosedReport on Team Cymru buying Amplicy, November 2021 (opens in a new tab)via SecurityWeek (opens in a new tab)
November 2021Schwarz Group acquired XM CyberXM Cyber provides a platform for continuous exposure management across hybrid environments.$700mReport on Schwarz Group buying XM Cyber, November 2021 (opens in a new tab)via SecurityWeek (opens in a new tab)
August 2021Mandiant acquired IntrigueGives companies technology to map their attack surfaceUndisclosedReport on Mandiant buying Intrigue, August 2021 (opens in a new tab)via SecurityWeek (opens in a new tab)
June 2021LookingGlass Cyber Solutions acquired AlphaWaveProvides attack surface management solutions from TexasUndisclosedReport on LookingGlass Cyber Solutions buying AlphaWave, June 2021 (opens in a new tab)via SecurityWeek (opens in a new tab)
December 2020Palo Alto Networks acquired Expanse IncIt shows firms their weak points by constantly checking what is exposed$670mReport on Palo Alto Networks buying Expanse Inc, December 2020 (opens in a new tab)via Cybersecurity Ventures (opens in a new tab)
January 2020Coalition acquired BinaryEdgeMakes a search engine identifying internet-exposed devicesUndisclosedReport on Coalition buying BinaryEdge, January 2020 (opens in a new tab)via Cybersecurity Ventures (opens in a new tab)

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.