GRC acquisitions and funding
84 acquisitions of GRC vendors since 2020 and 146 funding rounds since 2022 on record. The most active buyers are Pathlock (3), Riskonnect (2) and Zyston (2). See the GRC vendors in the directory.
Browse other categories
- Managed security services 466
- AI and LLM security 217
- Security consulting and vCISO 213
- Fraud and payment fraud prevention 165
- Application security testing 162
- Identity and access management 159
- Encryption and key management 156
- Threat intelligence 148
- Security awareness and human risk 138
- Attack surface management 112
Deals
Showing 1 to 10 of 10
| Date | Deal | Amount | Source |
|---|---|---|---|
| December 2022 | Delphia acquired Fathom PrivacyData rights company letting individuals own their personal application data | Undisclosed | Report on Delphia buying Fathom Privacy, December 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2022 | RegScale acquired GovReadyPlatform treating open source licensing rules as programmable code | Undisclosed | Report on RegScale buying GovReady, November 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2022 | Pathlock acquired Grey MonarchSpecialises in SAP security monitoring, licence optimisation and employee lifecycle automation | Undisclosed | Report on Pathlock buying Grey Monarch, September 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2022 | PentaFour acquired Winterhawk ConsultingHandles governance, risk, security, job roles and checks for firms | Undisclosed | Report on PentaFour buying Winterhawk Consulting, June 2022 (opens in a new tab) |
| May 2022 | Pathlock acquired Security WeaverMakes software for SAP users covering rules, danger and following regulations | Undisclosed | Report on Pathlock buying Security Weaver, May 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| May 2022 | Pathlock acquired CSI ToolsGovernance, risk and compliance management software provider | Undisclosed | Report on Pathlock buying CSI Tools, May 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| May 2022 | F24 acquired Business-DNA SolutionsSwiss governance, risk and compliance company | Undisclosed | Report on F24 buying Business-DNA Solutions, May 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2022 | Fenergo acquired SentinelsRegulatory technology firm, known as a regtech | Undisclosed | Report on Fenergo buying Sentinels, April 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2022 | Kroll acquired ResolverBusiness building software for big firms to handle danger and safety | Undisclosed | Report on Kroll buying Resolver, March 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2022 | Riskonnect acquired Sword GRCMakes project and enterprise risk management software | Undisclosed | Report on Riskonnect buying Sword GRC, February 2022 (opens in a new tab)via SecurityWeek (opens in a new tab) |
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.