Audits acquisitions and funding
23 acquisitions of compliance audit firms since 2020 and 2 funding rounds since 2022 on record. The most active buyers are Axiom GRC (3), SGS (2) and Neovera (2). See the compliance audit firms in the directory.
Browse other categories
- Managed security services 466
- GRC and compliance automation 230
- AI and LLM security 217
- Security consulting and vCISO 213
- Fraud and payment fraud prevention 165
- Application security testing 162
- Identity and access management 159
- Encryption and key management 156
- Threat intelligence 148
- Security awareness and human risk 138
Deals
Showing 1 to 23 of 23
| Date | Deal | Amount | Source |
|---|---|---|---|
| September 2026 | A-LIGN acquired AssurePointCloud security assessment company offering IRAP assessments | Undisclosed | Report on A-LIGN buying AssurePoint, September 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2026 | Axiom GRC acquired MHMCanadian assurance firm specialising in cybersecurity audit frameworks such as SOC and ISO | Undisclosed | Report on Axiom GRC buying MHM, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| May 2026 | Datavault AI acquired CyberCatchFirm tests compliance constantly and breaks into systems using software | $100m | Report on Datavault AI buying CyberCatch, May 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2026 | ControlCase acquired CyberNINESCybersecurity assessor and adviser for defence industrial base compliance | Undisclosed | Report on ControlCase buying CyberNINES, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2026 | Applus+ Laboratories acquired Teron LabsCybersecurity evaluation laboratory for product security and cryptographic certifications | Undisclosed | Report on Applus+ Laboratories buying Teron Labs, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2026 | SGS acquired Panacea InfosecInformation security firm offering payment security, data protection and privacy compliance services | Undisclosed | Report on SGS buying Panacea Infosec, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2026 | Gryphon Investors acquired FortreumProvides audit, advisory and technical testing for cybersecurity certifications | Undisclosed | Report on Gryphon Investors buying Fortreum, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2026 | Axiom GRC acquired AssurancePointProvides SOC and ISO audit and advisory services for mid-sized organisations | Undisclosed | Report on Axiom GRC buying AssurancePoint, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2025 | Axiom GRC acquired IS PartnersProvides cyber assurance and compliance audits across frameworks such as SOC 2 and ISO 27001 | Undisclosed | Report on Axiom GRC buying IS Partners, November 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2025 | 360 Advanced acquired Security Compliance AssociatesHelps organisations navigate complex compliance requirements and certification | Undisclosed | Report on 360 Advanced buying Security Compliance Associates, September 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2025 | Hg acquired A-LIGNA-LIGN provides cybersecurity compliance audits and certifications across frameworks like SOC 2 and ISO 27001. | Undisclosed | Report on Hg buying A-LIGN, July 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2025 | Sensiba acquired AssuranceLabCybersecurity audit and risk assurance firm covering multiple compliance standards | Undisclosed | Report on Sensiba buying AssuranceLab, April 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2025 | LRQA acquired Core Business SolutionsAdvisory services and software for quality management systems certification, including ISO 27001 | Undisclosed | Report on LRQA buying Core Business Solutions, February 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| December 2024 | SGS acquired CertXCertification specialist in cybersecurity, artificial intelligence and functional safety | Undisclosed | Report on SGS buying CertX, December 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| October 2024 | Solar acquired Digital SecurityProvides information security audits and ERP system development services | Undisclosed | Report on Solar buying Digital Security, October 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| August 2024 | Schellman acquired INSYTEProvides risk management, internal control and business process attestation and compliance services | Undisclosed | Report on Schellman buying INSYTE, August 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| August 2024 | CyberGuard Advantage acquired Control GapCanadian provider of PCI compliance, cyber risk and offensive security solutions | Undisclosed | Report on CyberGuard Advantage buying Control Gap, August 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2023 | Neovera acquired AppliedCSServices covering digital defence, danger control, tech rule following and checks | Undisclosed | Report on Neovera buying AppliedCS, September 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2023 | Neovera acquired 10-D SecurityWorks on digital defence, danger control, tech rule following and checks | Undisclosed | Report on Neovera buying 10-D Security, September 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2023 | Integrity360 acquired AdvantioFirm focused on payment card industry audits and digital defence work | Undisclosed | Report on Integrity360 buying Advantio, July 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2022 | Global Market Innovators acquired Cosant Cyber SecurityHelps organisations meet security rules and manage danger | Undisclosed | Report on Global Market Innovators buying Cosant Cyber Security, September 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2022 | Atlantic Street Capital acquired CyberGuard ComplianceChecks whether firms follow IT rules and how secure they are | Undisclosed | Report on Atlantic Street Capital buying CyberGuard Compliance, July 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2022 | Applus+ acquired JtsecCybersecurity certification firm | Undisclosed | Report on Applus+ buying Jtsec, July 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.