GRC acquisitions and funding
84 acquisitions of GRC vendors since 2020 and 146 funding rounds since 2022 on record. The most active buyers are Pathlock (3), Riskonnect (2) and Zyston (2). See the GRC vendors in the directory.
Browse other categories
- Managed security services 466
- AI and LLM security 217
- Security consulting and vCISO 213
- Fraud and payment fraud prevention 165
- Application security testing 162
- Identity and access management 159
- Encryption and key management 156
- Threat intelligence 148
- Security awareness and human risk 138
- Attack surface management 112
Deals
Showing 1 to 14 of 14
| Date | Deal | Amount | Source |
|---|---|---|---|
| December 2023 | DeepSeas acquired GreyCastle SecurityCovers governance, security work, personal data and breach handling | Undisclosed | Report on DeepSeas buying GreyCastle Security, December 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| October 2023 | Zyston acquired Blue LavaProvides security program management software as a service | Undisclosed | Report on Zyston buying Blue Lava, October 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2023 | SafeBase acquired StacksiA tool using machine learning to automate security forms | Undisclosed | Report on SafeBase buying Stacksi, September 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| August 2023 | Zyston acquired ComplyifyHandles security risks and rule keeping through artificial intelligence | Undisclosed | Report on Zyston buying Complyify, August 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2023 | Board of Cyber acquired TrustHQFrench risk mitigation and compliance firm | Undisclosed | Report on Board of Cyber buying TrustHQ, July 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2023 | Anatomy IT acquired MarsdenAdvisorsMIPS business unit providing value based care services | Undisclosed | Report on Anatomy IT buying MarsdenAdvisors, July 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| May 2023 | GeoComply acquired OneComplyProvides licensing and compliance management platform for regulated markets | Undisclosed | Report on GeoComply buying OneComply, May 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2023 | Drumz acquired Acuity Risk ManagementIntegrated risk management software and services | $4.5m | Report on Drumz buying Acuity Risk Management, April 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2023 | Cinven acquired ArcherIntegrated risk management software covering enterprise and operational risk, IT and security risk, compliance, audit, third-party governance and operational resilience. | Undisclosed | Report on Cinven buying Archer, April 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2023 | ScalePad acquired ControlMapTool for overseeing rules, dangers and legal duties at outsourced IT firms | Undisclosed | Report on ScalePad buying ControlMap, March 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2023 | eBay acquired 3PM ShieldAI-based marketplace compliance monitoring to stop counterfeit and illegal goods | Undisclosed | Report on eBay buying 3PM Shield, February 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2023 | Vanta acquired TrustPageAutomates security reviews for compliance and trust management | Undisclosed | Report on Vanta buying TrustPage, January 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2023 | Exterro acquired ZapprovedE-discovery provider for legal governance risk and compliance | Undisclosed | Report on Exterro buying Zapproved, January 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2023 | Bema Capital Investments acquired Beryllium InfoSecServes public sector and military bodies with security compliance work | Undisclosed | Report on Bema Capital Investments buying Beryllium InfoSec, January 2023 (opens in a new tab)via SecurityWeek (opens in a new tab) |
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.