cybersecdirectory

GRC acquisitions and funding

84 acquisitions of GRC vendors since 2020 and 146 funding rounds since 2022 on record. The most active buyers are Pathlock (3), Riskonnect (2) and Zyston (2). See the GRC vendors in the directory.

16acquisitions
31funding rounds
$555mpaid in the 2 acquisitions with a disclosed price
$561.0mraised in the 27 rounds with a disclosed size
Browse other categories

Deals

Showing 1 to 47 of 47

DateDealAmountSource
December 2025ID-Pal acquired NorthRowKnow your business checks and anti-money laundering compliance intelligenceUndisclosedReport on ID-Pal buying NorthRow, December 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
November 2025SecureNavi raised a Series B roundInvestors Mobile Internet Capital and SBI Investment$7.8mReport on the SecureNavi funding round of November 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
November 2025MorganFranklin Cyber acquired Lynx Technology PartnersProvides cybersecurity and risk management services to organisationsUndisclosedReport on MorganFranklin Cyber buying Lynx Technology Partners, November 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
October 2025Spektrum raised a seed round$10mReport on the Spektrum funding round of October 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
October 2025Satark AI raised a pre-seed roundInvestor Infynno SolutionsUndisclosedReport on the Satark AI funding round of October 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
October 2025Formalize raised a Series B roundInvestors Acton Capital and BlackFin Capital Partners$35mReport on the Formalize funding round of October 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
October 2025ComplyJet raised a pre-seed roundInvestors Abhiraj Singh Bhal and Varun Khaitan$250kReport on the ComplyJet funding round of October 2025 (opens in a new tab)
October 2025Darwin AI raised a Series A roundInvestor Insight Partners$15mReport on the Darwin AI funding round of October 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
October 2025CoreStack raised debt fundingInvestor Post Road Group$50mReport on the CoreStack funding round of October 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
October 2025Nymiz raised a pre-Series A roundInvestor TIIN Capital$2.3mReport on the Nymiz funding round of October 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
October 2025Zania raised a Series A roundInvestor New Enterprise Associates$18mReport on the Zania funding round of October 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
October 2025Oneleet raised a Series A roundInvestor Dawn Capital$33mReport on the Oneleet funding round of October 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
October 2025Riveron acquired Eden DataAustin advisory firm with cybersecurity and governance risk compliance expertiseUndisclosedReport on Riveron buying Eden Data, October 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
September 2025Mycroft raised a seed roundInvestor Luge Capital$3.5mReport on the Mycroft funding round of September 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
September 2025RegScale raised a Series B roundInvestor Washington Harbour Partners$30mReport on the RegScale funding round of September 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
September 2025Kertos raised a Series A roundInvestor Portage Ventures$16.6mReport on the Kertos funding round of September 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
September 2025Naq raised a Series A roundInvestor Automate Health$7mReport on the Naq funding round of September 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
September 2025SecurityScorecard acquired HyperComplyUses artificial intelligence to handle security forms and rule keepingUndisclosedReport on SecurityScorecard buying HyperComply, September 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
September 2025Axiom GRC acquired The DPO CentreProvides data protection officer and privacy compliance servicesUndisclosedReport on Axiom GRC buying The DPO Centre, September 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
August 2025TrustWorks raised a seed roundInvestor Elkstone VenturesUndisclosedReport on the TrustWorks funding round of August 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
August 2025Red Helix acquired Risk CrewProvides information security governance risk compliance consultancy and penetration testingUndisclosedReport on Red Helix buying Risk Crew, August 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
August 2025Diginex acquired FindingsCybersecurity and compliance automation company$305mReport on Diginex buying Findings, August 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
August 2025Continuous acquired SycorrProvides security and compliance services for financial institutionsUndisclosedReport on Continuous buying Sycorr, August 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
July 2025Safe Security raised a Series C roundInvestor Avataar Venture Partners$70mReport on the Safe Security funding round of July 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
July 2025Comp AI raised a pre-seed roundInvestor OSS Capital$2.6mReport on the Comp AI funding round of July 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
July 2025Vanta raised a Series D roundVanta provides a platform for automating security compliance and risk management.Investor Wellington Management$150mReport on the Vanta funding round of July 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
July 2025Delve raised a Series A roundInvestor Insight Partners$32mReport on the Delve funding round of July 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
July 2025Zip Security raised a Series A roundInvestor Ballistic Ventures$13.5mReport on the Zip Security funding round of July 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
July 2025Knox raised a seed roundInvestor Felicis$6.5mReport on the Knox funding round of July 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
July 2025Privasee raised a seed roundInvestors Pitchdrive, Plug and Play and SFC Capital$1.4mReport on the Privasee funding round of July 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
July 2025Bureau Veritas Cybersecurity acquired Institute For Cyber Risk (IFCR)Danish firm specialising in governance, risk, compliance, offensive security and trainingUndisclosedReport on Bureau Veritas Cybersecurity buying Institute For Cyber Risk (IFCR), July 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
June 2025Trustible raised a seed roundInvestor Lookout Ventures$4.6mReport on the Trustible funding round of June 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
June 2025Compyl raised a Series A roundInvestor Venture Guides$12mReport on the Compyl funding round of June 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
June 2025Cytracom acquired TentaclePlatform for cybersecurity assessments, third-party risk and GRC programmesUndisclosedReport on Cytracom buying Tentacle, June 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
May 2025Kovr.ai raised a seed roundInvestors IronGate Capital Advisors and Xfund$3.6mReport on the Kovr.ai funding round of May 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
May 2025Tyto Athene acquired StackArmorFedRAMP, FISMA and CMMC compliance acceleration with cloud security automationUndisclosedReport on Tyto Athene buying StackArmor, May 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
May 2025SurgeONE.ai acquired MGL ConsultingCompliance services for broker-dealers, advisers and commodities firmsUndisclosedReport on SurgeONE.ai buying MGL Consulting, May 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
May 2025Scytale acquired AudITechCompliance and trust automation softwareUndisclosedReport on Scytale buying AudITech, May 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
May 2025Proofpoint acquired NucleiCompliance archiving and AI data enrichment for workplace communicationsUndisclosedReport on Proofpoint buying Nuclei, May 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
April 2025Anecdotes raised a Series B roundInvestor DTCP$30mReport on the Anecdotes funding round of April 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
March 2025HITRUST raised private equity fundingInvestor Brighton Park CapitalUndisclosedReport on the HITRUST funding round of March 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
March 2025Cyberating raised a pre-seed round$2mReport on the Cyberating funding round of March 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
February 2025ZenPrivata raised a seed roundInvestor LvlUp VenturesUndisclosedReport on the ZenPrivata funding round of February 2025 (opens in a new tab)
February 2025PCI Checklist raised a seed roundInvestors Future Impact Fund and Tacirler Portfolio$1mReport on the PCI Checklist funding round of February 2025 (opens in a new tab)
February 2025Drata acquired SafeBaseProvides a trust center platform for security reviews$250mReport on Drata buying SafeBase, February 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
January 2025Delve raised a seed roundInvestors FundersClub, General Catalyst, Soma Capital and Y Combinator$3.3mReport on the Delve funding round of January 2025 (opens in a new tab)via Security, Funded (opens in a new tab)
January 2025Case IQ acquired LextegrityProvides compliance analytics and automation software for monitoring fraud and corruptionUndisclosedReport on Case IQ buying Lextegrity, January 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.