cybersecdirectory

GRC acquisitions and funding

84 acquisitions of GRC vendors since 2020 and 146 funding rounds since 2022 on record. The most active buyers are Pathlock (3), Riskonnect (2) and Zyston (2). See the GRC vendors in the directory.

10acquisitions
18funding rounds
$131.5mraised in the 16 rounds with a disclosed size
Browse other categories

Showing 1 to 28 of 28

DateDealAmountSource
October 2026Complaion raised a seed roundInvestors Eurazeo and Italian Founders Fund$15.4mReportvia Security, Funded
September 2026OneClickComply raised fundingInvestors Mercia Ventures and Northstar Ventures$1.3mReportvia Security, Funded
September 2026Comp AI raised a Series A roundInvestors Roo Capital and Grand Ventures$34mReportvia Security, Funded
September 2026ZeroRisk raised a Series A roundZeroRisk provides an agentic platform that automates compliance and vendor risk assessments.Investor Middlegame Ventures$10mReportvia Security, Funded
September 2026HelmGuard AI raised a seed roundInvestors Frontline Ventures and Infinity Ventures$7.3mReportvia Security, Funded
September 2026CostObserver received a grantInvestor Singapore Management University$8kReportvia Security, Funded
August 2026Strike Graph raised funding$1.4mReportvia Security, Funded
August 2026Athena Agentic acquired MaxxsureCyber risk quantification and cyber insurance analytics platform scoring organisational riskUndisclosedReportvia SecurityWeek
July 2026Workstreet raised fundingInvestor Coalesce CapitalUndisclosedReportvia Security, Funded
July 2026Pulse Security AI raised a seed roundInvestor Foundation Capital$8mReportvia Security, Funded
June 2026Brightline Technologies acquired Security VitalsProvides cybersecurity and CMMC compliance services for defence contractorsUndisclosedReportvia SecurityWeek
May 2026ComplyDo raised a pre-seed roundInvestor Y Combinator$1.3mReportvia Security, Funded
May 2026Integritis acquired JS Information GovernanceData protection, information governance and regulatory consultancy for scaling UK businessesUndisclosedReportvia SecurityWeek
April 2026VerifyVASP acquired SygnaTravel Rule compliance network for virtual asset service providersUndisclosedReportvia SecurityWeek
April 2026Fortreum acquired Kovr.AIProvides a compliance platform for US defence and national securityUndisclosedReportvia SecurityWeek
March 2026Noru raised a pre-seed roundInvestor Ampli Ventures$641kReportvia Security, Funded
March 2026IntelliGRC raised a seed roundIntelliGRC provides software that helps managed service providers automate cybersecurity compliance and audit readiness.Investors Kyle Hanslovan and Blu Ventures Investors$3.5mReportvia Security, Funded
March 2026Michael Hebert (via Turtle Island Technology Solutions) acquired Castellan Information Security ServicesDelivers governance, risk, compliance and preparedness advisory services across CanadaUndisclosedReportvia SecurityWeek
March 2026Koniag Cyber acquired SoundWay ConsultingProvides CMMC compliance services for defence contractorsUndisclosedReportvia SecurityWeek
February 2026Spektrum raised a convertible note$7.2mReportvia Security, Funded
February 2026Secfix raised a Series A roundInvestor Alstin Capital$12mReportvia Security, Funded
February 2026Solidrange raised a seed roundInvestor Sharaka Capital$2.4mReportvia Security, Funded
February 2026Copla raised a Series A roundInvestor Iron Wolf Capital$7.1mReportvia Security, Funded
February 2026Quantara AI raised a seed roundQuantara AI provides an AI-native platform for cyber risk quantification and prioritization.UndisclosedReport
February 2026Complyance raised a Series A roundInvestor Google Ventures$20mReportvia Security, Funded
January 2026Wolters Kluwer acquired StandardFusionUndisclosedReportvia SecurityWeek
January 2026Usercentrics acquired MCP ManagerGovernance platform for the Model Context Protocol used in AI workflowsUndisclosedReportvia SecurityWeek
January 2026TechnoMile acquired SIMS SoftwareIndustrial security software supporting compliance with regulatory and audit requirementsUndisclosedReportvia SecurityWeek

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.