GRC acquisitions and funding
84 acquisitions of GRC vendors since 2020 and 146 funding rounds since 2022 on record. The most active buyers are Pathlock (3), Riskonnect (2) and Zyston (2). See the GRC vendors in the directory.
Browse other categories
- Managed security services 466
- AI and LLM security 217
- Security consulting and vCISO 213
- Fraud and payment fraud prevention 165
- Application security testing 162
- Identity and access management 159
- Encryption and key management 156
- Threat intelligence 148
- Security awareness and human risk 138
- Attack surface management 112
Deals
Showing 1 to 12 of 12
| Date | Deal | Amount | Source |
|---|---|---|---|
| November 2024 | Health Catalyst acquired Intraprise HealthCybersecurity risk management platform and services for healthcare | Undisclosed | Report on Health Catalyst buying Intraprise Health, November 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| October 2024 | RKON Technologies acquired Bridge Security AdvisorsSpecialises in cloud security, governance risk compliance and identity access management | Undisclosed | Report on RKON Technologies buying Bridge Security Advisors, October 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2024 | Hummingbird acquired LogicLoop | Undisclosed | Report on Hummingbird buying LogicLoop, September 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2024 | ACA acquired Encore ComplianceAI-driven risk management services and compliance software for financial firms | Undisclosed | Report on ACA buying Encore Compliance, July 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2024 | 360 Advanced acquired AberrantGives outsourced IT providers one place to handle their protection duties | Undisclosed | Report on 360 Advanced buying Aberrant, July 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2024 | Riskonnect acquired CammsCloud-based governance, risk and compliance software platform with IT risk services | Undisclosed | Report on Riskonnect buying Camms, June 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2024 | Dedagroup acquired Quod OrbisRisk management and compliance software solutions | Undisclosed | Report on Dedagroup buying Quod Orbis, June 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2024 | Fscom acquired FMConsultRisk and compliance solutions provider to asset managers in UK and Ireland | Undisclosed | Report on Fscom buying FMConsult, March 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2024 | Thoma Bravo acquired EQSCloud software for corporate compliance and investor relations tasks | Undisclosed | Report on Thoma Bravo buying EQS, February 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2024 | Spirit Technology Solutions acquired InfoTrustDelivers assurance, governance, risk handling and compliance offerings | $22.5m | Report on Spirit Technology Solutions buying InfoTrust, February 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2024 | Archer acquired Compliance.aiProvides AI-driven regulatory change management solutions for compliance and risk | Undisclosed | Report on Archer buying Compliance.ai, February 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2024 | Dynatrace acquired RunecastLessens risk, secures and keeps hybrid multicloud setups compliant | Undisclosed | Report on Dynatrace buying Runecast, January 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.