cybersecdirectory

Penetration testing acquisitions and funding

53 acquisitions of penetration testing companies since 2020 and 48 funding rounds since 2022 on record. The most active buyers are Quadrant Private Equity (3), NetSPI (2) and Aikido Security (2). See the penetration testing companies in the directory.

53acquisitions
48funding rounds
$66.4mpaid in the 2 acquisitions with a disclosed price
$1.4bnraised in the 40 rounds with a disclosed size
Browse other categories

Showing 51 to 100 of 101

DateDealAmountSource
September 2024GRC Group acquired Pentest PeopleCREST and CHECK-accredited UK penetration testing firm with an SecurePortal platform and transparent pricing for mid-market organizations.UndisclosedReportvia SecurityWeek
August 2024Zellic acquired Code4renaSmart contract auditing platform running competitive security auditsUndisclosedReportvia SecurityWeek
August 2024Cyber Advisors acquired BAI SecurityProvides offensive security testing and governance, risk and compliance solutionsUndisclosedReportvia SecurityWeek
July 2024PureCyber raised private equity fundingInvestor Business Growth Fund$6.4mReportvia Security, Funded
June 2024OnSecurity raised a Series A roundCREST-accredited, platform-driven penetration testing vendor in Bristol offering AI-augmented testing with rapid self-service booking for over 400 global customers.Investor Gresham House Ventures$7mReportvia Security, Funded
June 2024Almanax raised a pre-seed roundInvestor Defy.vcUndisclosedReportvia Security, Funded
March 2024FluidOne acquired SureCloud Cyber ServicesFocuses on penetration testing and advising on cyber riskUndisclosedReportvia SecurityWeek
March 2024F5 acquired HeyhackOffers automated reconnaissance and penetration testingUndisclosedReportvia SecurityWeek
December 2023Wavenet acquired Falanx CyberA British business doing intrusion tests, threat hunting and simulated attacksUndisclosedReportvia SecurityWeek
November 2023IP Pathways acquired Tenax SolutionsSecurity solutions provider offering vulnerability scans, penetration testing and compliance examinationsUndisclosedReportvia SecurityWeek
October 2023Tesserent acquired Beyond BinaryTests systems by simulated attacks and offers expert advice$4.4mReportvia SecurityWeek
October 2023Cycura acquired ProackAttacks systems on request, including intrusion tests, red teams and tricking staffUndisclosedReportvia SecurityWeek
August 2023mHACKeroni received a grantInvestor United States Space Force$50kReport
August 2023Aegis raised a seed roundInvestors Generative Ventures and Northern Light Venture CapitalUndisclosedReport
August 2023Spearbit raised a seed roundInvestor Framework Ventures$7mReportvia Security, Funded
August 2023Horizon3 raised a Series C roundHorizon3 runs autonomous attack testing to find and verify exploitable weaknesses in production environments.Investor Craft Ventures$40mReportvia Security, Funded
August 2023CovertSwarm raised fundingSubscription-based offensive cybersecurity firm delivering continuous cyber attack services with CREST STAR and CBEST accreditations from its London headquarters.UndisclosedReportvia Security, Funded
August 2023Buguard raised a seed roundInvestor A15$500kReport
August 2023SIG acquired Triaxiom SecurityCybersecurity firm doing penetration testing, compliance auditing and security consultingUndisclosedReportvia SecurityWeek
July 2023Delivsec raised a pre-seed roundUndisclosedReport
July 2023SpecterOps raised a Series A roundAdversary-focused security firm created by former DoD red team operators. Creators of BloodHound. CREST-accredited for penetration testing, red teaming, and purple team assessments.Investor Ballistic Ventures$8.5mReportvia Security, Funded
July 2023Digital Value acquired A-76Firm testing systems, watching threats and running a security operations centreUndisclosedReportvia SecurityWeek
June 2023ECIT acquired KovertFirm focused on intrusion checks, security checks and mimicking online assaultsUndisclosedReportvia SecurityWeek
May 2023Chess acquired CyberLabCardiff-based CREST and CHECK-accredited cyber security company delivering penetration testing, red teaming, and OT security assessments as part of the Chess Group.UndisclosedReportvia SecurityWeek
April 2023SpecterOps raised a Series A roundAdversary-focused security firm created by former DoD red team operators. Creators of BloodHound. CREST-accredited for penetration testing, red teaming, and purple team assessments.Investor Decibel Partners$25mReportvia Security, Funded
April 2023Kaseya acquired Vonahi SecurityProvides an automated network penetration testing platformUndisclosedReportvia SecurityWeek
April 2023Core4ce acquired PatchAdvisorIT security firm providing penetration testing servicesUndisclosedReportvia SecurityWeek
March 2023Quadrant Private Equity acquired ZXOffers security assessment, penetration testing, training and certification servicesUndisclosedReportvia SecurityWeek
March 2023Quadrant Private Equity acquired Quantum SecurityOffers security assessment, penetration testing, training and certification servicesUndisclosedReportvia SecurityWeek
March 2023Quadrant Private Equity acquired Helix SecurityOffers security assessment, penetration testing, training and certification servicesUndisclosedReportvia SecurityWeek
February 2023Wavenet acquired Fidus Information SecurityUK consultancy providing penetration testing and security testing servicesUndisclosedReportvia SecurityWeek
February 2023Accenture acquired MorphusOffers intrusion testing, oversight, risk control and outsourced securityUndisclosedReportvia SecurityWeek
January 2023NetSPI acquired NvisiumProvides offensive security and penetration testing servicesUndisclosedReportvia SecurityWeek
January 2023Beyon Cyber acquired DTS SolutionDubai-based cybersecurity firm providing pen testing and security consulting across the GCC with expertise in critical infrastructure.UndisclosedReportvia SecurityWeek
November 2022Bishop Fox raised fundingTempe, Arizona-headquartered offensive security firm and Black Hat / DEF CON regulars, makers of the Cosmos continuous attack surface management platform.Investor WestCap$46mReportvia Security, Funded
October 2022Hexens raised a seed roundHexens audits smart contracts and provides offensive security for blockchain and Web3 projects.Investor IOSG Ventures$4.2mReportvia Security, Funded
October 2022NetSPI raised fundingPenetration testing firm trusted by nine of the top ten US banks, with the Resolve platform for continuous attack surface management.Investor KKR$410mReportvia Security, Funded
September 2022SGS acquired Penumbra SecurityProvides information security assessment services to organisationsUndisclosedReportvia SecurityWeek
July 2022Bishop Fox raised a Series B roundTempe, Arizona-headquartered offensive security firm and Black Hat / DEF CON regulars, makers of the Cosmos continuous attack surface management platform.Investor Carrick Capital Partners$75mReportvia Security, Funded
July 2022Resecurity acquired Cybit SecCarries out checks for weak points and tests that try to break into systemsUndisclosedReportvia SecurityWeek
April 2022Strike raised a seed roundInvestor Greyhound Capital$5.4mReport
February 2022XMIRROR raised a Series B roundUndisclosedReport
February 2022Appalachia Technologies acquired Cyber Protection GroupSpecialises in penetration testing and complianceUndisclosedReportvia SecurityWeek
September 2021Solvinity acquired SecurifyTests software safety and breaks into systems for clientsUndisclosedReportvia SecurityWeek
August 2021GoVanguard acquired Gotham SecurityProvides red-teaming and penetration testing servicesUndisclosedReportvia SecurityWeek
August 2021Chess acquired ArmadilloOffers intrusion testing, weakness checks and simulated attacksUndisclosedReportvia SecurityWeek
July 2021Avantus Federal acquired Occam’s Razor TechnologiesFocuses on breaking into networks and cyber research workUndisclosedReportvia SecurityWeek
April 2021Coalfire acquired Neuralys CorporationA web tool for organising tests that probe system weaknessesUndisclosedReportvia SecurityWeek
February 2021Guardforce AI acquired Handshake NetworkingA firm in Hong Kong that tests systems by trying to break inUndisclosedReportvia SecurityWeek
November 2020Acronis acquired CyberLynxOffers security audits, pen tests, forensics and trainingUndisclosedReportvia Cybersecurity Ventures

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.