cybersecdirectory

GRC acquisitions and funding

84 acquisitions of GRC vendors since 2020 and 146 funding rounds since 2022 on record. The most active buyers are Pathlock (3), Riskonnect (2) and Zyston (2). See the GRC vendors in the directory.

16acquisitions
$555mpaid in the 2 acquisitions with a disclosed price
Browse other categories

Showing 1 to 16 of 16

DateDealAmountSource
December 2025ID-Pal acquired NorthRowKnow your business checks and anti-money laundering compliance intelligenceUndisclosedReportvia SecurityWeek
November 2025MorganFranklin Cyber acquired Lynx Technology PartnersProvides cybersecurity and risk management services to organisationsUndisclosedReportvia SecurityWeek
October 2025Riveron acquired Eden DataAustin advisory firm with cybersecurity and governance risk compliance expertiseUndisclosedReportvia SecurityWeek
September 2025SecurityScorecard acquired HyperComplyUses artificial intelligence to handle security forms and rule keepingUndisclosedReportvia SecurityWeek
September 2025Axiom GRC acquired The DPO CentreProvides data protection officer and privacy compliance servicesUndisclosedReportvia SecurityWeek
August 2025Red Helix acquired Risk CrewProvides information security governance risk compliance consultancy and penetration testingUndisclosedReportvia SecurityWeek
August 2025Diginex acquired FindingsCybersecurity and compliance automation company$305mReportvia SecurityWeek
August 2025Continuous acquired SycorrProvides security and compliance services for financial institutionsUndisclosedReportvia SecurityWeek
July 2025Bureau Veritas Cybersecurity acquired Institute For Cyber Risk (IFCR)Danish firm specialising in governance, risk, compliance, offensive security and trainingUndisclosedReportvia SecurityWeek
June 2025Cytracom acquired TentaclePlatform for cybersecurity assessments, third-party risk and GRC programmesUndisclosedReportvia SecurityWeek
May 2025Tyto Athene acquired StackArmorFedRAMP, FISMA and CMMC compliance acceleration with cloud security automationUndisclosedReportvia SecurityWeek
May 2025SurgeONE.ai acquired MGL ConsultingCompliance services for broker-dealers, advisers and commodities firmsUndisclosedReportvia SecurityWeek
May 2025Scytale acquired AudITechCompliance and trust automation softwareUndisclosedReportvia SecurityWeek
May 2025Proofpoint acquired NucleiCompliance archiving and AI data enrichment for workplace communicationsUndisclosedReportvia SecurityWeek
February 2025Drata acquired SafeBaseProvides a trust center platform for security reviews$250mReportvia SecurityWeek
January 2025Case IQ acquired LextegrityProvides compliance analytics and automation software for monitoring fraud and corruptionUndisclosedReportvia SecurityWeek

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.