| September 2026 | Dragos acquired runZerorunZero provides exposure management software that discovers and profiles assets across IT, OT, IoT, cloud and mobile networks. | Undisclosed | Report on Dragos buying runZero, September 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2026 | CrowdStrike acquired XM CyberIts protected inventions and code deal with finding weaknesses and mapping how intruders move | Undisclosed | Report on CrowdStrike buying XM Cyber, July 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2026 | Accenture acquired runZerorunZero provides exposure management software that discovers and profiles assets across IT, OT, IoT, cloud and mobile networks. | Undisclosed | Report on Accenture buying runZero, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2026 | Check Point acquired CyclopsBolsters risk tracking by finding assets using AI | Undisclosed | Report on Check Point buying Cyclops, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2026 | Arctic Wolf acquired Sevco SecurityUS cybersecurity company providing attack surface management capabilities | Undisclosed | Report on Arctic Wolf buying Sevco Security, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2025 | SAFE acquired BalbixSpecialises in continuous threat exposure management | Undisclosed | Report on SAFE buying Balbix, November 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2025 | Lansweeper acquired RedjackDiscovers assets and maps application dependencies using network traffic analysis | Undisclosed | Report on Lansweeper buying Redjack, July 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2025 | Data443 acquired TacitRedA hosted tool for managing the outside attack surface | Undisclosed | Report on Data443 buying TacitRed, June 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| May 2025 | CPX acquired SpiderSilkCyber-AI startup offering exposure management platform and autonomous SOC AI agents | Undisclosed | Report on CPX buying SpiderSilk, May 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2025 | Fenix24 acquired appNoviMaps the enterprise attack surface | Undisclosed | Report on Fenix24 buying appNovi, April 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2025 | Deepwatch acquired DassanaSupplies technology for handling danger and weakness exposure | Undisclosed | Report on Deepwatch buying Dassana, February 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2025 | Searchlight Cyber acquired AssetnoteAustralian firm selling attack surface management technology | $62m | Report on Searchlight Cyber buying Assetnote, January 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| December 2024 | CyberProof acquired Interpres SecurityContinuous threat exposure management and security control assessment | Undisclosed | Report on CyberProof buying Interpres Security, December 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2024 | Insight Partners acquired Detectify | Undisclosed | Report on Insight Partners buying Detectify, November 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2024 | Rapid7 acquired Noetic CyberCyber asset attack surface management, giving visibility of customer environments | Undisclosed | Report on Rapid7 buying Noetic Cyber, July 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2024 | NetSPI acquired Hubble TechnologyProvides cyber asset attack surface management and security posture management | Undisclosed | Report on NetSPI buying Hubble Technology, June 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| May 2024 | Bugcrowd acquired InformerUK provider of external attack surface management and penetration testing services | Undisclosed | Report on Bugcrowd buying Informer, May 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2024 | Flare acquired ForetraceProvides a threat exposure management engine | Undisclosed | Report on Flare buying Foretrace, March 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2023 | Boltonshield acquired ScanmeterExternal attack surface management firm based in Switzerland | Undisclosed | Report on Boltonshield buying Scanmeter, November 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2023 | Stratascale acquired Vector0Provides attack surface management technology and services | Undisclosed | Report on Stratascale buying Vector0, September 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2023 | Outpost24 acquired SweepaticCreates an external attack surface management platform | Undisclosed | Report on Outpost24 buying Sweepatic, June 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2022 | Boxx Insurance acquired TemplarbitAmerican business offering automatic exposure mapping and supplier danger checks | Undisclosed | Report on Boxx Insurance buying Templarbit, November 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| October 2022 | Red Sift acquired HardenizeUK web security firm with attack surface management capabilities | Undisclosed | Report on Red Sift buying Hardenize, October 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2022 | CrowdStrike acquired ReposifyStartup providing external attack surface management | Undisclosed | Report on CrowdStrike buying Reposify, September 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2022 | IBM acquired RandoriAttack surface management company | Undisclosed | Report on IBM buying Randori, June 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2022 | Tenable acquired Bit DiscoveryDevelops attack surface management software | $45m | Report on Tenable buying Bit Discovery, April 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2022 | Darktrace acquired CybersprintAttack surface management company | $53.7m | Report on Darktrace buying Cybersprint, February 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2022 | Recorded Future acquired SecurityTrailsHelps organisations track internet-facing assets | $65m | Report on Recorded Future buying SecurityTrails, January 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2021 | Team Cymru acquired AmplicyProvides threat surface management | Undisclosed | Report on Team Cymru buying Amplicy, November 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2021 | Schwarz Group acquired XM CyberXM Cyber provides a platform for continuous exposure management across hybrid environments. | $700m | Report on Schwarz Group buying XM Cyber, November 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| August 2021 | Mandiant acquired IntrigueGives companies technology to map their attack surface | Undisclosed | Report on Mandiant buying Intrigue, August 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2021 | LookingGlass Cyber Solutions acquired AlphaWaveProvides attack surface management solutions from Texas | Undisclosed | Report on LookingGlass Cyber Solutions buying AlphaWave, June 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| December 2020 | Palo Alto Networks acquired Expanse IncIt shows firms their weak points by constantly checking what is exposed | $670m | Report on Palo Alto Networks buying Expanse Inc, December 2020 (opens in a new tab)via Cybersecurity Ventures (opens in a new tab) |
| January 2020 | Coalition acquired BinaryEdgeMakes a search engine identifying internet-exposed devices | Undisclosed | Report on Coalition buying BinaryEdge, January 2020 (opens in a new tab)via Cybersecurity Ventures (opens in a new tab) |