cybersecdirectory

Penetration testing acquisitions and funding

53 acquisitions of penetration testing companies since 2020 and 48 funding rounds since 2022 on record. The most active buyers are Quadrant Private Equity (3), NetSPI (2) and Aikido Security (2). See the penetration testing companies in the directory.

53acquisitions
48funding rounds
$66.4mpaid in the 2 acquisitions with a disclosed price
$1.4bnraised in the 40 rounds with a disclosed size
Browse other categories

Showing 1 to 50 of 101

DateDealAmountSource
September 2026NetSPI acquired SynackFedRAMP-authorized crowdsourced penetration testing platform combining the vetted SRT researcher community with AI-powered Hydra technology for continuous security testing.UndisclosedReportvia SecurityWeek
September 2026A-LIGN acquired PathfynderProvides penetration testing, red teaming and incident response servicesUndisclosedReportvia SecurityWeek
September 2026CounterMeasure Security raised a seed round$1.4mReport
September 2026FAZE Security raised a seed roundInvestor New Era Capital Partners$6mReportvia Security, Funded
August 2026Cytix raised a Series A roundInvestor Northern Gritstone$7mReportvia Security, Funded
August 2026Horizon3 raised a Series E roundHorizon3 runs autonomous attack testing to find and verify exploitable weaknesses in production environments.Investors NightDragon and New Enterprise Associates$250mReportvia Security, Funded
July 2026Twenty Technologies raised a Series B roundInvestor Khosla Ventures$30mReportvia Security, Funded
July 2026OBDURIX raised a seed roundUndisclosedReport
July 2026Casco raised a Series A roundInvestor Standard Capital$13mReportvia Security, Funded
July 2026DataExpert Group acquired ADO SecurityOffensive and defensive security services providerUndisclosedReportvia SecurityWeek
June 2026Twenty Technologies raised a Series B roundInvestor Accel$100mReport
June 2026A Security raised a seed roundInvestor CyberStarts$5mReportvia Security, Funded
June 2026A Security raised a Series A roundInvestor Lightspeed Venture Partners$32mReportvia Security, Funded
June 2026Valiant Solutions acquired BreakPoint LabsDelivers AI-enabled cyber operations, threat emulation, red teaming and DevSecOpsUndisclosedReportvia SecurityWeek
May 2026Vulnetic raised a pre-seed round$35kReportvia Security, Funded
May 2026Prikus raised a seed round$2.5mReportvia Security, Funded
April 2026Autonomous Cyber raised a seed round$2.5mReportvia Security, Funded
April 2026APX Security raised a seed round$375kReportvia Security, Funded
March 2026RunSybil raised a seed roundInvestor Khosla Ventures$40mReportvia Security, Funded
March 2026SafeHill acquired Arcane SecurityOffensive security firm specialising in autonomous AI penetration testing and application securityUndisclosedReportvia SecurityWeek
February 2026Littlefish acquired Stripe OLTAward-winning CREST-certified managed cyber security and IT support provider with offices in Bristol, London, and Manchester, specialising in penetration testing and Microsoft security technologies.UndisclosedReportvia SecurityWeek
January 2026Novee Security raised a seed roundInvestors YL Ventures, Canaan Partners and Oren Zeev$51.5mReportvia Security, Funded
January 2026Horizon3 raised fundingHorizon3 runs autonomous attack testing to find and verify exploitable weaknesses in production environments.Investor Prosperity7 VenturesUndisclosedReportvia Security, Funded
December 2025Limerston Capital acquired AristiCHECK and CREST-accredited Birmingham-based cyber security consultancy with over 15 years of experience delivering penetration testing, red teaming, and OT security assessments for government and private sector clients.UndisclosedReportvia SecurityWeek
December 2025Infinum acquired AMR CyberSecurityPenetration testing and security consulting servicesUndisclosedReportvia SecurityWeek
November 2025SpecterOps raised fundingAdversary-focused security firm created by former DoD red team operators. Creators of BloodHound. CREST-accredited for penetration testing, red teaming, and purple team assessments.$30mReportvia Security, Funded
November 2025Twenty Technologies raised a Series A roundInvestor Caffeinated Capital$38mReportvia Security, Funded
November 2025Saepio acquired RupturaOffensive security specialist providing penetration testing servicesUndisclosedReportvia SecurityWeek
November 2025Pentera acquired EVA Information SecurityOffensive security firm doing AI red teaming and penetration testingUndisclosedReportvia SecurityWeek
September 2025Unit 221b raised a seed roundInvestor J2 Ventures$5mReportvia Security, Funded
September 2025Aikido Security acquired HaickerTurns elite human hacking into autonomous penetration testing systemsUndisclosedReportvia SecurityWeek
September 2025Aikido Security acquired AllseekBuilds AI agents that act as real attackers for pentestingUndisclosedReportvia SecurityWeek
August 2025Cryptic Vector acquired Caesar Creek SoftwareOffensive cyber research, vulnerability analysis, exploit development and reverse engineeringUndisclosedReportvia SecurityWeek
July 2025Haicker raised a seed roundInvestor Project Europe$229kReport
July 2025Haicker raised a pre-seed roundInvestor Founderful Campus$31kReport
June 2025ThreatSpike Red raised a Series A roundLondon-based cybersecurity firm offering unlimited, fixed-price penetration testing and red teaming services with ISO 27001 certification and a unique subscription model.Investor Expedition Growth Capital$14mReportvia Security, Funded
June 2025Melius CyberSafe raised fundingInvestor North East Fund$338kReportvia Security, Funded
June 2025Truesec acquired BanshiePenetration testing, red teaming and ethical hacking servicesUndisclosedReportvia SecurityWeek
May 2025Horizon3 raised fundingHorizon3 runs autonomous attack testing to find and verify exploitable weaknesses in production environments.$73mReportvia Security, Funded
May 2025Tulsi received a grantInvestor NC IDEA$10kReport
April 2025Infosys acquired The Missing LinkSydney-headquartered Australian cybersecurity firm founded in 1997, now part of Infosys. CREST-approved with OSCP, OSCE, and OSEE-certified testers.$62mReportvia SecurityWeek
April 2025Cyber Advisors acquired Stratum SecurityInformation security consulting firm offering assessment and threat simulation servicesUndisclosedReportvia SecurityWeek
March 2025Strike raised a Series A roundInvestor FinTech Collective$13.5mReportvia Security, Funded
March 2025Evolve Security raised fundingUndisclosedReportvia Security, Funded
March 2025SpecterOps raised a Series B roundAdversary-focused security firm created by former DoD red team operators. Creators of BloodHound. CREST-accredited for penetration testing, red teaming, and purple team assessments.Investor Insight Partners$75mReportvia Security, Funded
February 2025TAC Security acquired CyberScopeGreek web3 security firm doing smart contract and blockchain auditsUndisclosedReportvia SecurityWeek
January 2025Inherent acquired DevensysCyber resilience services including penetration testing, SOC monitoring, incident response and trainingUndisclosedReportvia SecurityWeek
October 2024Nomios acquired DionachGlobal enterprise cybersecurity consultancy founded in 1999 in Oxford, holding rare CREST STAR-FS accreditation and delivering penetration testing, red and purple teaming, and PCI QSA services across five international offices.UndisclosedReportvia SecurityWeek
September 2024Pentra raised a pre-seed roundInvestor Early Game Ventures$167kReportvia Security, Funded
September 2024Screwloose IT acquired White Rook CyberProvides offensive security, penetration testing, GRC advisory and managed security services.UndisclosedReportvia SecurityWeek

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.