GRC acquisitions and funding
84 acquisitions of GRC vendors since 2020 and 146 funding rounds since 2022 on record. The most active buyers are Pathlock (3), Riskonnect (2) and Zyston (2). See the GRC vendors in the directory.
Browse other categories
- Managed security services 466
- AI and LLM security 217
- Security consulting and vCISO 213
- Fraud and payment fraud prevention 165
- Application security testing 162
- Identity and access management 159
- Encryption and key management 156
- Threat intelligence 148
- Security awareness and human risk 138
- Attack surface management 112
Deals
Showing 1 to 10 of 10
| Date | Deal | Amount | Source |
|---|---|---|---|
| August 2026 | Athena Agentic acquired MaxxsureCyber risk quantification and cyber insurance analytics platform scoring organisational risk | Undisclosed | Report on Athena Agentic buying Maxxsure, August 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2026 | Brightline Technologies acquired Security VitalsProvides cybersecurity and CMMC compliance services for defence contractors | Undisclosed | Report on Brightline Technologies buying Security Vitals, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| May 2026 | Integritis acquired JS Information GovernanceData protection, information governance and regulatory consultancy for scaling UK businesses | Undisclosed | Report on Integritis buying JS Information Governance, May 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2026 | VerifyVASP acquired SygnaTravel Rule compliance network for virtual asset service providers | Undisclosed | Report on VerifyVASP buying Sygna, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2026 | Fortreum acquired Kovr.AIProvides a compliance platform for US defence and national security | Undisclosed | Report on Fortreum buying Kovr.AI, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2026 | Michael Hebert (via Turtle Island Technology Solutions) acquired Castellan Information Security ServicesDelivers governance, risk, compliance and preparedness advisory services across Canada | Undisclosed | Report on Michael Hebert (via Turtle Island Technology Solutions) buying Castellan Information Security Services, March 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2026 | Koniag Cyber acquired SoundWay ConsultingProvides CMMC compliance services for defence contractors | Undisclosed | Report on Koniag Cyber buying SoundWay Consulting, March 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2026 | Wolters Kluwer acquired StandardFusion | Undisclosed | Report on Wolters Kluwer buying StandardFusion, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2026 | Usercentrics acquired MCP ManagerGovernance platform for the Model Context Protocol used in AI workflows | Undisclosed | Report on Usercentrics buying MCP Manager, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2026 | TechnoMile acquired SIMS SoftwareIndustrial security software supporting compliance with regulatory and audit requirements | Undisclosed | Report on TechnoMile buying SIMS Software, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.