GRC acquisitions and funding
84 acquisitions of GRC vendors since 2020 and 146 funding rounds since 2022 on record. The most active buyers are Pathlock (3), Riskonnect (2) and Zyston (2). See the GRC vendors in the directory.
Browse other categories
- Managed security services 466
- AI and LLM security 217
- Security consulting and vCISO 213
- Fraud and payment fraud prevention 165
- Application security testing 162
- Identity and access management 159
- Encryption and key management 156
- Threat intelligence 148
- Security awareness and human risk 138
- Attack surface management 112
Deals
Showing 51 to 84 of 84
| Date | Deal | Amount | Source |
|---|---|---|---|
| January 2023 | Exterro acquired ZapprovedE-discovery provider for legal governance risk and compliance | Undisclosed | Report on Exterro buying Zapproved, January 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2023 | Bema Capital Investments acquired Beryllium InfoSecServes public sector and military bodies with security compliance work | Undisclosed | Report on Bema Capital Investments buying Beryllium InfoSec, January 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| December 2022 | Delphia acquired Fathom PrivacyData rights company letting individuals own their personal application data | Undisclosed | Report on Delphia buying Fathom Privacy, December 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2022 | RegScale acquired GovReadyPlatform treating open source licensing rules as programmable code | Undisclosed | Report on RegScale buying GovReady, November 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2022 | Pathlock acquired Grey MonarchSpecialises in SAP security monitoring, licence optimisation and employee lifecycle automation | Undisclosed | Report on Pathlock buying Grey Monarch, September 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2022 | PentaFour acquired Winterhawk ConsultingHandles governance, risk, security, job roles and checks for firms | Undisclosed | Report on PentaFour buying Winterhawk Consulting, June 2022 (opens in a new tab) |
| May 2022 | Pathlock acquired Security WeaverMakes software for SAP users covering rules, danger and following regulations | Undisclosed | Report on Pathlock buying Security Weaver, May 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| May 2022 | Pathlock acquired CSI ToolsGovernance, risk and compliance management software provider | Undisclosed | Report on Pathlock buying CSI Tools, May 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| May 2022 | F24 acquired Business-DNA SolutionsSwiss governance, risk and compliance company | Undisclosed | Report on F24 buying Business-DNA Solutions, May 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2022 | Fenergo acquired SentinelsRegulatory technology firm, known as a regtech | Undisclosed | Report on Fenergo buying Sentinels, April 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2022 | Kroll acquired ResolverBusiness building software for big firms to handle danger and safety | Undisclosed | Report on Kroll buying Resolver, March 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2022 | Riskonnect acquired Sword GRCMakes project and enterprise risk management software | Undisclosed | Report on Riskonnect buying Sword GRC, February 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| December 2021 | Workiva acquired AuditNet | Undisclosed | Report on Workiva buying AuditNet, December 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| December 2021 | Moody’s acquired kompanyAustrian service checking businesses and clients with records that stand up to scrutiny | Undisclosed | Report on Moody’s buying kompany, December 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| December 2021 | Moody’s acquired 360kompany AGAustrian service checking businesses and clients with records that stand up to scrutiny | Undisclosed | Report on Moody’s buying 360kompany AG, December 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| December 2021 | ComplySci acquired RIA in a BoxSells tools for wealth managers covering rules, cyber defence and daily operations | Undisclosed | Report on ComplySci buying RIA in a Box, December 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2021 | Ideagen acquired CompliSpaceProvides governance, risk, compliance and policy management software for education and social care | $76m | Report on Ideagen buying CompliSpace, November 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2021 | Ideagen acquired CompliancePath | $12m | Report on Ideagen buying CompliancePath, November 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2021 | Appsian Security acquired Q SoftwareSpecialises in security and compliance for JD Edwards and Oracle ERP systems | Undisclosed | Report on Appsian Security buying Q Software, November 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| October 2021 | Sysnet Global Solutions acquired TrustwaveSpecialises in PCI compliance for payment card industry standards | $80m | Report on Sysnet Global Solutions buying Trustwave, October 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| October 2021 | Ampa acquired CSS AssureLooks after keeping information safe and limiting danger | Undisclosed | Report on Ampa buying CSS Assure, October 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2021 | Mitratech acquired AlyneProvides AI-powered governance, risk and compliance platform | Undisclosed | Report on Mitratech buying Alyne, September 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2021 | Breakwater Solutions acquired ClairvoyaSpecialises in data governance solutions and data lineage | Undisclosed | Report on Breakwater Solutions buying Clairvoya, September 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| August 2021 | CDW Corporation acquired Focal Point Data RiskSpecialises in data risk management | Undisclosed | Report on CDW Corporation buying Focal Point Data Risk, August 2021 (opens in a new tab) |
| May 2021 | Relativity acquired Text IQAI for identifying sensitive data in legal, compliance and privacy work | Undisclosed | Report on Relativity buying Text IQ, May 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| May 2021 | Gryphon Investors acquired Iceberg NetworksProvides security operations management, governance, risk and compliance solutions | Undisclosed | Report on Gryphon Investors buying Iceberg Networks, May 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| May 2021 | Gimmal acquired Sherpa SoftwareHelps firms manage data and find evidence for legal cases | Undisclosed | Report on Gimmal buying Sherpa Software, May 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2021 | OneTrust acquired ConvercentEthics and compliance software for governance and risk management | Undisclosed | Report on OneTrust buying Convercent, April 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2021 | Logicalis acquired ÁudeaSpecialises in cybersecurity and regulatory compliance | Undisclosed | Report on Logicalis buying Áudea, April 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2021 | SailPoint acquired ERP MaestroGives SaaS governance, risk and compliance tools with SoD monitoring | Undisclosed | Report on SailPoint buying ERP Maestro, March 2021 (opens in a new tab) |
| March 2021 | Atlantic-Pacific Processing Systems acquired Conformance TechnologiesAssesses and monitors risk and compliance for small businesses | Undisclosed | Report on Atlantic-Pacific Processing Systems buying Conformance Technologies, March 2021 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2020 | Innovative Discovery acquired IntegroGives large firms ways to manage records and information properly | Undisclosed | Report on Innovative Discovery buying Integro, September 2020 (opens in a new tab)via Cybersecurity Ventures (opens in a new tab) |
| July 2020 | Cerberus Sentinel acquired TalaTekA risk management company providing integrated risk management services | Undisclosed | Report on Cerberus Sentinel buying TalaTek, July 2020 (opens in a new tab)via Cybersecurity Ventures (opens in a new tab) |
| May 2020 | Smarsh acquired EntredaSoftware for security rule keeping and risk measurement | Undisclosed | Report on Smarsh buying Entreda, May 2020 (opens in a new tab)via Cybersecurity Ventures (opens in a new tab) |
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.