cybersecdirectory

CNAPP acquisitions and funding

40 acquisitions of CNAPP vendors since 2020 and 48 funding rounds since 2022 on record. The most active buyers are Fortinet (2), Tenable (2) and Cisco (2). See the CNAPP vendors in the directory.

40acquisitions
$32.5bnpaid in the 5 acquisitions with a disclosed price
Browse other categories

Showing 1 to 40 of 40

DateDealAmountSource
March 2026CloudQuery acquired Env ZeroInfrastructure lifecycle management platform with cloud governance and securityUndisclosedReportvia SecurityWeek
November 2025RKON Technologies acquired ScaleSecImplements and enhances cloud security capabilities across major cloud platformsUndisclosedReportvia SecurityWeek
May 2025Orca Security acquired Opus SecuritySoftware that runs cloud safety tasks and fixes issues using artificial intelligenceUndisclosedReportvia SecurityWeek
May 2025Fortra acquired LookoutCloud security business, sold by mobile security firm LookoutUndisclosedReportvia SecurityWeek
March 2025Google Cloud acquired WizCloud security giant selling security products across major cloud platforms$32bnReportvia SecurityWeek
January 2025CYE acquired SolvoProvides cloud security posture and cloud infrastructure entitlement management technologyUndisclosedReportvia SecurityWeek
December 2024Aprio acquired SecuritybricksSpecialises in cloud security and compliance automation for government contractorsUndisclosedReportvia SecurityWeek
November 2024Wiz acquired DazzFixes cloud safety flaws using machine learning softwareUndisclosedReportvia SecurityWeek
November 2024Silverfort acquired RezonateProvides cloud identity protection servicesUndisclosedReportvia SecurityWeek
October 2024Cloudflare acquired KiveraHandles online safety, information safeguarding and rule adherenceUndisclosedReportvia SecurityWeek
June 2024Fortinet acquired LaceworkUndisclosedReportvia SecurityWeek
May 2024Drata acquired Oak9Embeds protection and rule following while cloud software is being writtenUndisclosedReportvia SecurityWeek
January 2024SentinelOne acquired PingSafeCloud native application protection platformUndisclosedReportvia SecurityWeek
September 2023Tenable acquired ErmeticIsraeli cloud security startup, product details not described in the sourceUndisclosedReportvia SecurityWeek
September 2023CrowdStrike acquired BionicSpecialises in application security posture managementUndisclosedReportvia SecurityWeek
June 2023Virtana acquired OpsCruiseCloud native and Kubernetes observability platform for IT operationsUndisclosedReportvia SecurityWeek
June 2023Bitdefender acquired Horangi Cyber SecurityProvides cloud security posture management and cloud infrastructure entitlement managementUndisclosedReportvia SecurityWeek
April 2023SEK acquired CleanCloudHelps organisations detect cloud vulnerabilitiesUndisclosedReportvia SecurityWeek
April 2023NightDragon acquired vArmourProvides cloud application securityUndisclosedReportvia SecurityWeek
March 2023XM Cyber acquired ConflueraFinds and answers threats inside cloud environmentsUndisclosedReportvia SecurityWeek
March 2023Cisco acquired LightspinIsraeli cloud security firmUndisclosedReportvia SecurityWeek
February 2023Cisco acquired ValtixCloud network security platformUndisclosedReportvia SecurityWeek
December 2022AlgoSec acquired PrevasioAgentless cloud-native application protection with posture management and vulnerability assessmentUndisclosedReportvia SecurityWeek
April 2022KPMG acquired ForticaProvides cloud security servicesUndisclosedReportvia SecurityWeek
February 2022Snyk acquired FugueSpecialises in cloud security and complianceUndisclosedReportvia SecurityWeek
November 2021Lacework acquired SolubleCloud infrastructure management firm specialising in infrastructure as codeUndisclosedReportvia SecurityWeek
October 2021Plurilock acquired CloudCodesIndia-based cloud security firm providing cloud security products$1.7mReportvia SecurityWeek
September 2021Tenable acquired AccuricsOffers cloud security tools to developers and defenders$160mReportvia SecurityWeek
September 2021FireMon acquired DisruptOpsSpecialises in cloud security operations and risk monitoringUndisclosedReportvia SecurityWeek
August 2021Qualys acquired TotalCloudTool for managing cloud tasks and building automation without coding, covering security and rulesUndisclosedReportvia SecurityWeek
July 2021Sysdig acquired ApolicyProvides infrastructure as code security for cloud environmentsUndisclosedReportvia SecurityWeek
July 2021CELESTE acquired Oceanet-TechnologyBuilds, runs and protects cloud systemsUndisclosedReportvia SecurityWeek
June 2021Deloitte acquired CloudQuestProvides cloud security posture management capabilities from CaliforniaUndisclosedReportvia SecurityWeek
May 2021Fidelis Cybersecurity acquired CloudPassageCloud security and compliance companyUndisclosedReportvia SecurityWeek
April 2021Zscaler acquired TrustdomeCloud infrastructure entitlement management governing access across clouds and identitiesUndisclosedReportvia Wikipedia
March 2021Fortinet acquired ShieldXSpecialises in cloud and network securityUndisclosedReportvia SecurityWeek
February 2021Palo Alto Networks acquired BridgecrewIt offers a cloud protection service built from written rules$156mReportvia SecurityWeek
June 2020IBM acquired SpanugoProvides cloud cybersecurity posture management solutionsUndisclosedReportvia Cybersecurity Ventures
April 2020Zscaler acquired CloudneetiFinds configuration errors in cloud applicationsUndisclosedReportvia Cybersecurity Ventures
April 2020Rapid7 acquired DivvyCloud$145mReportvia Cybersecurity Ventures

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.