cybersecdirectory

IR acquisitions and funding

36 acquisitions of incident response firms since 2020 and 30 funding rounds since 2022 on record. See the incident response firms in the directory.

36acquisitions
$8.1bnpaid in the 5 acquisitions with a disclosed price
Browse other categories

Showing 1 to 36 of 36

DateDealAmountSource
June 2026ROC acquired ZTCDevelops digital forensics solutions and provides software engineering to federal government customersUndisclosedReportvia SecurityWeek
June 2025Sophora acquired Data-SecIncident response, managed detection and security solution implementation for regulated sectorsUndisclosedReportvia SecurityWeek
June 2025Abacus Group acquired EntaraManaged IT and security provider with cyber incident response capabilitiesUndisclosedReportvia SecurityWeek
April 2025MOXFIVE acquired modePUSHDigital forensics and incident response firmUndisclosedReportvia SecurityWeek
January 2025Quorum Cyber acquired Kivu ConsultingUndisclosedReportvia SecurityWeek
January 2025Darktrace acquired Cado SecurityCarries out incident investigation and responseUndisclosedReportvia SecurityWeek
November 2024UBDS Group acquired 3B Data SecurityProvides digital forensic incident response, security training, consulting and penetration testingUndisclosedReportvia SecurityWeek
November 2024Kingswood Capital Management acquired IDXHelps after information leaks and shields personal detailsUndisclosedReportvia SecurityWeek
November 2024Everfox acquired YakabodProvides case management software for security-driven organisations and insider risk investigationsUndisclosedReportvia SecurityWeek
October 2024Sophos acquired Secureworks$859mReportvia SecurityWeek
August 2024Magnet Forensics acquired Medex ForensicsVideo evidence integrity and deepfake detection forensics toolsUndisclosedReportvia SecurityWeek
April 2024Veeam acquired CovewareHandles blackmail attacks and helps firms get ready beforehandUndisclosedReportvia SecurityWeek
February 2024Resilience acquired BreachQuestIncident response company helping deal with business email compromise attacksUndisclosedReportvia SecurityWeek
November 2023PagerDuty acquired JeliEnables automated incident management and improves enterprise resilienceUndisclosedReportvia SecurityWeek
January 2023Thoma Bravo acquired Magnet ForensicsInvestigates digital crimes and helps firms recover from breaches$1.3bnReportvia SecurityWeek
August 2022Reynolds and Reynolds acquired Proton Dealership ITDealership cybersecurity firm offering incident response, training, assessments and monitoringUndisclosedReportvia SecurityWeek
May 2022FTCyber acquired Cyber ForensicsDeals with security breaches and examines digital evidence after attacksUndisclosedReportvia SecurityWeek
March 2022Google acquired MandiantMandiant provides threat intelligence and incident response, now sold as Google Threat Intelligence alongside VirusTotal within Google Cloud.$5.4bnReportvia SecurityWeek
February 2022SecurityScorecard acquired LIFARSServices covering digital evidence, handling attacks and staying strong onlineUndisclosedReportvia SecurityWeek
February 2022Arctic Wolf acquired Tetra DefenseProvides incident response and recovery capabilitiesUndisclosedReportvia SecurityWeek
December 2021ZeroFox acquired IDXProvides incident response services to organisationsUndisclosedReportvia SecurityWeek
October 2021Dataminr acquired KrizoEnterprise crisis response platformUndisclosedReportvia SecurityWeek
October 2021Chainalysis acquired ExcygentProfessional services firm helping with cybercrime investigations for public and private sectorsUndisclosedReportvia SecurityWeek
September 2021Consilio acquired Adecco GroupLegal consulting and eDiscovery business unit of Special CounselUndisclosedReportvia SecurityWeek
September 2021Booz Allen Hamilton acquired TracepointFirm handling digital evidence gathering and response to breachesUndisclosedReport
August 2021BreachQuest acquired Rendition InfosecWorks on digital evidence, breach handling, checks and finding weaknessesUndisclosedReportvia SecurityWeek
July 2021BlueVoyant acquired Marclay AssociatesBritish advisory firm handling breaches and cyber enquiriesUndisclosedReportvia SecurityWeek
June 2021eSentire acquired CyFIRMakes tools for digital forensics and investigationsUndisclosedReportvia SecurityWeek
April 2021Rapid7 acquired VelociraptorOpen source endpoint monitoring, forensics and incident response techUndisclosedReportvia SecurityWeek
April 2021Everbridge acquired xMattersProvides incident response and management services$240mReport
March 2021CFC acquired Insane TechnologiesProvides cybersecurity and incident response servicesUndisclosedReportvia SecurityWeek
December 2020TCDI acquired Cicayda LLCeDiscovery, cybersecurity and managed document review software and servicesUndisclosedReportvia Cybersecurity Ventures
August 2020Palo Alto Networks acquired Crypsis GroupIncident response, risk management and digital forensics consulting firm$265mReportvia Wikipedia
February 2020Aon acquired CytelligenceA firm handling breach response and computer evidence workUndisclosedReportvia Cybersecurity Ventures
January 2020Kroll acquired RP Digital SecurityA computer forensics firmUndisclosedReportvia Cybersecurity Ventures
January 2020Cellebrite acquired BlackBag TechnologiesBuilds tools for investigating cyber attacks and handling their aftermathUndisclosedReportvia Cybersecurity Ventures

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.