BAS acquisitions and funding
5 acquisitions of breach and attack simulation vendors since 2020 and 37 funding rounds since 2022 on record. See the breach and attack simulation vendors in the directory.
Browse other categories
- Managed security services 466
- GRC and compliance automation 230
- AI and LLM security 217
- Security consulting and vCISO 213
- Fraud and payment fraud prevention 165
- Application security testing 162
- Identity and access management 159
- Encryption and key management 156
- Threat intelligence 148
- Security awareness and human risk 138
Deals
Showing 1 to 5 of 5
| Date | Deal | Amount | Source |
|---|---|---|---|
| October 2026 | Aikido Security acquired CyberlyAI-powered attack simulations and tools for tracking employee AI usage | Undisclosed | Report on Aikido Security buying Cyberly, October 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2026 | Suzu Labs acquired Emulated CriminalsAdversary emulation and continuous red teaming services | Undisclosed | Report on Suzu Labs buying Emulated Criminals, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2026 | Thinkst Canary acquired DeceptIQBuilds deception tools made by red teamers to trick attackers | Undisclosed | Report on Thinkst Canary buying DeceptIQ, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| May 2024 | Reveald acquired rThreatEmulation technology to validate cyber readiness and controls | Undisclosed | Report on Reveald buying rThreat, May 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2022 | HelpSystems acquired OutflankSimulates attacks on systems and teaches staff how to respond | Undisclosed | Report on HelpSystems buying Outflank, September 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.