cybersecdirectory

Audits acquisitions and funding

23 acquisitions of compliance audit firms since 2020 and 2 funding rounds since 2022 on record. The most active buyers are Axiom GRC (3), SGS (2) and Neovera (2). See the compliance audit firms in the directory.

23acquisitions
2funding rounds
$100mpaid in the 1 acquisition with a disclosed price
$85kraised in the 2 rounds with a disclosed size
Browse other categories

Deals

Showing 1 to 25 of 25

DateDealAmountSource
September 2026A-LIGN acquired AssurePointCloud security assessment company offering IRAP assessmentsUndisclosedReport on A-LIGN buying AssurePoint, September 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
June 2026Axiom GRC acquired MHMCanadian assurance firm specialising in cybersecurity audit frameworks such as SOC and ISOUndisclosedReport on Axiom GRC buying MHM, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
May 2026Datavault AI acquired CyberCatchFirm tests compliance constantly and breaks into systems using software$100mReport on Datavault AI buying CyberCatch, May 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
April 2026Kanuki raised a pre-seed round$35kReport on the Kanuki funding round of April 2026 (opens in a new tab)via Security, Funded (opens in a new tab)
April 2026ControlCase acquired CyberNINESCybersecurity assessor and adviser for defence industrial base complianceUndisclosedReport on ControlCase buying CyberNINES, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
April 2026Applus+ Laboratories acquired Teron LabsCybersecurity evaluation laboratory for product security and cryptographic certificationsUndisclosedReport on Applus+ Laboratories buying Teron Labs, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
January 2026SGS acquired Panacea InfosecInformation security firm offering payment security, data protection and privacy compliance servicesUndisclosedReport on SGS buying Panacea Infosec, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
January 2026Gryphon Investors acquired FortreumProvides audit, advisory and technical testing for cybersecurity certificationsUndisclosedReport on Gryphon Investors buying Fortreum, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
January 2026Axiom GRC acquired AssurancePointProvides SOC and ISO audit and advisory services for mid-sized organisationsUndisclosedReport on Axiom GRC buying AssurancePoint, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
November 2025Axiom GRC acquired IS PartnersProvides cyber assurance and compliance audits across frameworks such as SOC 2 and ISO 27001UndisclosedReport on Axiom GRC buying IS Partners, November 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
September 2025360 Advanced acquired Security Compliance AssociatesHelps organisations navigate complex compliance requirements and certificationUndisclosedReport on 360 Advanced buying Security Compliance Associates, September 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
July 2025Hg acquired A-LIGNA-LIGN provides cybersecurity compliance audits and certifications across frameworks like SOC 2 and ISO 27001.UndisclosedReport on Hg buying A-LIGN, July 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
April 2025Sensiba acquired AssuranceLabCybersecurity audit and risk assurance firm covering multiple compliance standardsUndisclosedReport on Sensiba buying AssuranceLab, April 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
February 2025LRQA acquired Core Business SolutionsAdvisory services and software for quality management systems certification, including ISO 27001UndisclosedReport on LRQA buying Core Business Solutions, February 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
December 2024SGS acquired CertXCertification specialist in cybersecurity, artificial intelligence and functional safetyUndisclosedReport on SGS buying CertX, December 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
October 2024Solar acquired Digital SecurityProvides information security audits and ERP system development servicesUndisclosedReport on Solar buying Digital Security, October 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
August 2024Schellman acquired INSYTEProvides risk management, internal control and business process attestation and compliance servicesUndisclosedReport on Schellman buying INSYTE, August 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
August 2024CyberGuard Advantage acquired Control GapCanadian provider of PCI compliance, cyber risk and offensive security solutionsUndisclosedReport on CyberGuard Advantage buying Control Gap, August 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
September 2023Neovera acquired AppliedCSServices covering digital defence, danger control, tech rule following and checksUndisclosedReport on Neovera buying AppliedCS, September 2023 (opens in a new tab)via SecurityWeek (opens in a new tab)
September 2023Neovera acquired 10-D SecurityWorks on digital defence, danger control, tech rule following and checksUndisclosedReport on Neovera buying 10-D Security, September 2023 (opens in a new tab)via SecurityWeek (opens in a new tab)
July 2023Integrity360 acquired AdvantioFirm focused on payment card industry audits and digital defence workUndisclosedReport on Integrity360 buying Advantio, July 2023 (opens in a new tab)via SecurityWeek (opens in a new tab)
November 2022Responsible Cyber raised a pre-seed roundInvestor EXPERT DOJO$50kReport on the Responsible Cyber funding round of November 2022 (opens in a new tab)
September 2022Global Market Innovators acquired Cosant Cyber SecurityHelps organisations meet security rules and manage dangerUndisclosedReport on Global Market Innovators buying Cosant Cyber Security, September 2022 (opens in a new tab)via SecurityWeek (opens in a new tab)
July 2022Atlantic Street Capital acquired CyberGuard ComplianceChecks whether firms follow IT rules and how secure they areUndisclosedReport on Atlantic Street Capital buying CyberGuard Compliance, July 2022 (opens in a new tab)via SecurityWeek (opens in a new tab)
July 2022Applus+ acquired JtsecCybersecurity certification firmUndisclosedReport on Applus+ buying Jtsec, July 2022 (opens in a new tab)via SecurityWeek (opens in a new tab)

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.