cybersecdirectory

GRC acquisitions and funding

84 acquisitions of GRC vendors since 2020 and 146 funding rounds since 2022 on record. The most active buyers are Pathlock (3), Riskonnect (2) and Zyston (2). See the GRC vendors in the directory.

10acquisitions
Browse other categories

Deals

Showing 1 to 10 of 10

DateDealAmountSource
August 2026Athena Agentic acquired MaxxsureCyber risk quantification and cyber insurance analytics platform scoring organisational riskUndisclosedReport on Athena Agentic buying Maxxsure, August 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
June 2026Brightline Technologies acquired Security VitalsProvides cybersecurity and CMMC compliance services for defence contractorsUndisclosedReport on Brightline Technologies buying Security Vitals, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
May 2026Integritis acquired JS Information GovernanceData protection, information governance and regulatory consultancy for scaling UK businessesUndisclosedReport on Integritis buying JS Information Governance, May 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
April 2026VerifyVASP acquired SygnaTravel Rule compliance network for virtual asset service providersUndisclosedReport on VerifyVASP buying Sygna, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
April 2026Fortreum acquired Kovr.AIProvides a compliance platform for US defence and national securityUndisclosedReport on Fortreum buying Kovr.AI, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
March 2026Michael Hebert (via Turtle Island Technology Solutions) acquired Castellan Information Security ServicesDelivers governance, risk, compliance and preparedness advisory services across CanadaUndisclosedReport on Michael Hebert (via Turtle Island Technology Solutions) buying Castellan Information Security Services, March 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
March 2026Koniag Cyber acquired SoundWay ConsultingProvides CMMC compliance services for defence contractorsUndisclosedReport on Koniag Cyber buying SoundWay Consulting, March 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
January 2026Wolters Kluwer acquired StandardFusionUndisclosedReport on Wolters Kluwer buying StandardFusion, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
January 2026Usercentrics acquired MCP ManagerGovernance platform for the Model Context Protocol used in AI workflowsUndisclosedReport on Usercentrics buying MCP Manager, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
January 2026TechnoMile acquired SIMS SoftwareIndustrial security software supporting compliance with regulatory and audit requirementsUndisclosedReport on TechnoMile buying SIMS Software, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.