cybersecdirectory

GRC acquisitions and funding

84 acquisitions of GRC vendors since 2020 and 146 funding rounds since 2022 on record. The most active buyers are Pathlock (3), Riskonnect (2) and Zyston (2). See the GRC vendors in the directory.

84acquisitions
146funding rounds
$750mpaid in the 7 acquisitions with a disclosed price
$2.4bnraised in the 123 rounds with a disclosed size
Browse other categories

Showing 1 to 50 of 230

DateDealAmountSource
October 2026Complaion raised a seed roundInvestors Eurazeo and Italian Founders Fund$15.4mReportvia Security, Funded
September 2026OneClickComply raised fundingInvestors Mercia Ventures and Northstar Ventures$1.3mReportvia Security, Funded
September 2026Comp AI raised a Series A roundInvestors Roo Capital and Grand Ventures$34mReportvia Security, Funded
September 2026ZeroRisk raised a Series A roundZeroRisk provides an agentic platform that automates compliance and vendor risk assessments.Investor Middlegame Ventures$10mReportvia Security, Funded
September 2026HelmGuard AI raised a seed roundInvestors Frontline Ventures and Infinity Ventures$7.3mReportvia Security, Funded
September 2026CostObserver received a grantInvestor Singapore Management University$8kReportvia Security, Funded
August 2026Strike Graph raised funding$1.4mReportvia Security, Funded
August 2026Athena Agentic acquired MaxxsureCyber risk quantification and cyber insurance analytics platform scoring organisational riskUndisclosedReportvia SecurityWeek
July 2026Workstreet raised fundingInvestor Coalesce CapitalUndisclosedReportvia Security, Funded
July 2026Pulse Security AI raised a seed roundInvestor Foundation Capital$8mReportvia Security, Funded
June 2026Brightline Technologies acquired Security VitalsProvides cybersecurity and CMMC compliance services for defence contractorsUndisclosedReportvia SecurityWeek
May 2026ComplyDo raised a pre-seed roundInvestor Y Combinator$1.3mReportvia Security, Funded
May 2026Integritis acquired JS Information GovernanceData protection, information governance and regulatory consultancy for scaling UK businessesUndisclosedReportvia SecurityWeek
April 2026VerifyVASP acquired SygnaTravel Rule compliance network for virtual asset service providersUndisclosedReportvia SecurityWeek
April 2026Fortreum acquired Kovr.AIProvides a compliance platform for US defence and national securityUndisclosedReportvia SecurityWeek
March 2026Noru raised a pre-seed roundInvestor Ampli Ventures$641kReportvia Security, Funded
March 2026IntelliGRC raised a seed roundIntelliGRC provides software that helps managed service providers automate cybersecurity compliance and audit readiness.Investors Kyle Hanslovan and Blu Ventures Investors$3.5mReportvia Security, Funded
March 2026Michael Hebert (via Turtle Island Technology Solutions) acquired Castellan Information Security ServicesDelivers governance, risk, compliance and preparedness advisory services across CanadaUndisclosedReportvia SecurityWeek
March 2026Koniag Cyber acquired SoundWay ConsultingProvides CMMC compliance services for defence contractorsUndisclosedReportvia SecurityWeek
February 2026Spektrum raised a convertible note$7.2mReportvia Security, Funded
February 2026Secfix raised a Series A roundInvestor Alstin Capital$12mReportvia Security, Funded
February 2026Solidrange raised a seed roundInvestor Sharaka Capital$2.4mReportvia Security, Funded
February 2026Copla raised a Series A roundInvestor Iron Wolf Capital$7.1mReportvia Security, Funded
February 2026Quantara AI raised a seed roundQuantara AI provides an AI-native platform for cyber risk quantification and prioritization.UndisclosedReport
February 2026Complyance raised a Series A roundInvestor Google Ventures$20mReportvia Security, Funded
January 2026Wolters Kluwer acquired StandardFusionUndisclosedReportvia SecurityWeek
January 2026Usercentrics acquired MCP ManagerGovernance platform for the Model Context Protocol used in AI workflowsUndisclosedReportvia SecurityWeek
January 2026TechnoMile acquired SIMS SoftwareIndustrial security software supporting compliance with regulatory and audit requirementsUndisclosedReportvia SecurityWeek
December 2025ID-Pal acquired NorthRowKnow your business checks and anti-money laundering compliance intelligenceUndisclosedReportvia SecurityWeek
November 2025SecureNavi raised a Series B roundInvestors Mobile Internet Capital and SBI Investment$7.8mReportvia Security, Funded
November 2025MorganFranklin Cyber acquired Lynx Technology PartnersProvides cybersecurity and risk management services to organisationsUndisclosedReportvia SecurityWeek
October 2025Spektrum raised a seed round$10mReportvia Security, Funded
October 2025Satark AI raised a pre-seed roundInvestor Infynno SolutionsUndisclosedReportvia Security, Funded
October 2025Formalize raised a Series B roundInvestors Acton Capital and BlackFin Capital Partners$35mReportvia Security, Funded
October 2025ComplyJet raised a pre-seed roundInvestors Abhiraj Singh Bhal and Varun Khaitan$250kReport
October 2025Darwin AI raised a Series A roundInvestor Insight Partners$15mReportvia Security, Funded
October 2025CoreStack raised debt fundingInvestor Post Road Group$50mReportvia Security, Funded
October 2025Nymiz raised a pre-Series A roundInvestor TIIN Capital$2.3mReportvia Security, Funded
October 2025Zania raised a Series A roundInvestor New Enterprise Associates$18mReportvia Security, Funded
October 2025Oneleet raised a Series A roundInvestor Dawn Capital$33mReportvia Security, Funded
October 2025Riveron acquired Eden DataAustin advisory firm with cybersecurity and governance risk compliance expertiseUndisclosedReportvia SecurityWeek
September 2025Mycroft raised a seed roundInvestor Luge Capital$3.5mReportvia Security, Funded
September 2025RegScale raised a Series B roundInvestor Washington Harbour Partners$30mReportvia Security, Funded
September 2025Kertos raised a Series A roundInvestor Portage Ventures$16.6mReportvia Security, Funded
September 2025Naq raised a Series A roundInvestor Automate Health$7mReportvia Security, Funded
September 2025SecurityScorecard acquired HyperComplyUses artificial intelligence to handle security forms and rule keepingUndisclosedReportvia SecurityWeek
September 2025Axiom GRC acquired The DPO CentreProvides data protection officer and privacy compliance servicesUndisclosedReportvia SecurityWeek
August 2025TrustWorks raised a seed roundInvestor Elkstone VenturesUndisclosedReportvia Security, Funded
August 2025Red Helix acquired Risk CrewProvides information security governance risk compliance consultancy and penetration testingUndisclosedReportvia SecurityWeek
August 2025Diginex acquired FindingsCybersecurity and compliance automation company$305mReportvia SecurityWeek

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.