cybersecdirectory

Penetration testing acquisitions and funding

53 acquisitions of penetration testing companies since 2020 and 48 funding rounds since 2022 on record. The most active buyers are Quadrant Private Equity (3), NetSPI (2) and Aikido Security (2). See the penetration testing companies in the directory.

53acquisitions
$66.4mpaid in the 2 acquisitions with a disclosed price
Browse other categories

Showing 1 to 50 of 53

DateDealAmountSource
September 2026NetSPI acquired SynackFedRAMP-authorized crowdsourced penetration testing platform combining the vetted SRT researcher community with AI-powered Hydra technology for continuous security testing.UndisclosedReportvia SecurityWeek
September 2026A-LIGN acquired PathfynderProvides penetration testing, red teaming and incident response servicesUndisclosedReportvia SecurityWeek
July 2026DataExpert Group acquired ADO SecurityOffensive and defensive security services providerUndisclosedReportvia SecurityWeek
June 2026Valiant Solutions acquired BreakPoint LabsDelivers AI-enabled cyber operations, threat emulation, red teaming and DevSecOpsUndisclosedReportvia SecurityWeek
March 2026SafeHill acquired Arcane SecurityOffensive security firm specialising in autonomous AI penetration testing and application securityUndisclosedReportvia SecurityWeek
February 2026Littlefish acquired Stripe OLTAward-winning CREST-certified managed cyber security and IT support provider with offices in Bristol, London, and Manchester, specialising in penetration testing and Microsoft security technologies.UndisclosedReportvia SecurityWeek
December 2025Limerston Capital acquired AristiCHECK and CREST-accredited Birmingham-based cyber security consultancy with over 15 years of experience delivering penetration testing, red teaming, and OT security assessments for government and private sector clients.UndisclosedReportvia SecurityWeek
December 2025Infinum acquired AMR CyberSecurityPenetration testing and security consulting servicesUndisclosedReportvia SecurityWeek
November 2025Saepio acquired RupturaOffensive security specialist providing penetration testing servicesUndisclosedReportvia SecurityWeek
November 2025Pentera acquired EVA Information SecurityOffensive security firm doing AI red teaming and penetration testingUndisclosedReportvia SecurityWeek
September 2025Aikido Security acquired HaickerTurns elite human hacking into autonomous penetration testing systemsUndisclosedReportvia SecurityWeek
September 2025Aikido Security acquired AllseekBuilds AI agents that act as real attackers for pentestingUndisclosedReportvia SecurityWeek
August 2025Cryptic Vector acquired Caesar Creek SoftwareOffensive cyber research, vulnerability analysis, exploit development and reverse engineeringUndisclosedReportvia SecurityWeek
June 2025Truesec acquired BanshiePenetration testing, red teaming and ethical hacking servicesUndisclosedReportvia SecurityWeek
April 2025Infosys acquired The Missing LinkSydney-headquartered Australian cybersecurity firm founded in 1997, now part of Infosys. CREST-approved with OSCP, OSCE, and OSEE-certified testers.$62mReportvia SecurityWeek
April 2025Cyber Advisors acquired Stratum SecurityInformation security consulting firm offering assessment and threat simulation servicesUndisclosedReportvia SecurityWeek
February 2025TAC Security acquired CyberScopeGreek web3 security firm doing smart contract and blockchain auditsUndisclosedReportvia SecurityWeek
January 2025Inherent acquired DevensysCyber resilience services including penetration testing, SOC monitoring, incident response and trainingUndisclosedReportvia SecurityWeek
October 2024Nomios acquired DionachGlobal enterprise cybersecurity consultancy founded in 1999 in Oxford, holding rare CREST STAR-FS accreditation and delivering penetration testing, red and purple teaming, and PCI QSA services across five international offices.UndisclosedReportvia SecurityWeek
September 2024Screwloose IT acquired White Rook CyberProvides offensive security, penetration testing, GRC advisory and managed security services.UndisclosedReportvia SecurityWeek
September 2024GRC Group acquired Pentest PeopleCREST and CHECK-accredited UK penetration testing firm with an SecurePortal platform and transparent pricing for mid-market organizations.UndisclosedReportvia SecurityWeek
August 2024Zellic acquired Code4renaSmart contract auditing platform running competitive security auditsUndisclosedReportvia SecurityWeek
August 2024Cyber Advisors acquired BAI SecurityProvides offensive security testing and governance, risk and compliance solutionsUndisclosedReportvia SecurityWeek
March 2024FluidOne acquired SureCloud Cyber ServicesFocuses on penetration testing and advising on cyber riskUndisclosedReportvia SecurityWeek
March 2024F5 acquired HeyhackOffers automated reconnaissance and penetration testingUndisclosedReportvia SecurityWeek
December 2023Wavenet acquired Falanx CyberA British business doing intrusion tests, threat hunting and simulated attacksUndisclosedReportvia SecurityWeek
November 2023IP Pathways acquired Tenax SolutionsSecurity solutions provider offering vulnerability scans, penetration testing and compliance examinationsUndisclosedReportvia SecurityWeek
October 2023Tesserent acquired Beyond BinaryTests systems by simulated attacks and offers expert advice$4.4mReportvia SecurityWeek
October 2023Cycura acquired ProackAttacks systems on request, including intrusion tests, red teams and tricking staffUndisclosedReportvia SecurityWeek
August 2023SIG acquired Triaxiom SecurityCybersecurity firm doing penetration testing, compliance auditing and security consultingUndisclosedReportvia SecurityWeek
July 2023Digital Value acquired A-76Firm testing systems, watching threats and running a security operations centreUndisclosedReportvia SecurityWeek
June 2023ECIT acquired KovertFirm focused on intrusion checks, security checks and mimicking online assaultsUndisclosedReportvia SecurityWeek
May 2023Chess acquired CyberLabCardiff-based CREST and CHECK-accredited cyber security company delivering penetration testing, red teaming, and OT security assessments as part of the Chess Group.UndisclosedReportvia SecurityWeek
April 2023Kaseya acquired Vonahi SecurityProvides an automated network penetration testing platformUndisclosedReportvia SecurityWeek
April 2023Core4ce acquired PatchAdvisorIT security firm providing penetration testing servicesUndisclosedReportvia SecurityWeek
March 2023Quadrant Private Equity acquired ZXOffers security assessment, penetration testing, training and certification servicesUndisclosedReportvia SecurityWeek
March 2023Quadrant Private Equity acquired Quantum SecurityOffers security assessment, penetration testing, training and certification servicesUndisclosedReportvia SecurityWeek
March 2023Quadrant Private Equity acquired Helix SecurityOffers security assessment, penetration testing, training and certification servicesUndisclosedReportvia SecurityWeek
February 2023Wavenet acquired Fidus Information SecurityUK consultancy providing penetration testing and security testing servicesUndisclosedReportvia SecurityWeek
February 2023Accenture acquired MorphusOffers intrusion testing, oversight, risk control and outsourced securityUndisclosedReportvia SecurityWeek
January 2023NetSPI acquired NvisiumProvides offensive security and penetration testing servicesUndisclosedReportvia SecurityWeek
January 2023Beyon Cyber acquired DTS SolutionDubai-based cybersecurity firm providing pen testing and security consulting across the GCC with expertise in critical infrastructure.UndisclosedReportvia SecurityWeek
September 2022SGS acquired Penumbra SecurityProvides information security assessment services to organisationsUndisclosedReportvia SecurityWeek
July 2022Resecurity acquired Cybit SecCarries out checks for weak points and tests that try to break into systemsUndisclosedReportvia SecurityWeek
February 2022Appalachia Technologies acquired Cyber Protection GroupSpecialises in penetration testing and complianceUndisclosedReportvia SecurityWeek
September 2021Solvinity acquired SecurifyTests software safety and breaks into systems for clientsUndisclosedReportvia SecurityWeek
August 2021GoVanguard acquired Gotham SecurityProvides red-teaming and penetration testing servicesUndisclosedReportvia SecurityWeek
August 2021Chess acquired ArmadilloOffers intrusion testing, weakness checks and simulated attacksUndisclosedReportvia SecurityWeek
July 2021Avantus Federal acquired Occam’s Razor TechnologiesFocuses on breaking into networks and cyber research workUndisclosedReportvia SecurityWeek
April 2021Coalfire acquired Neuralys CorporationA web tool for organising tests that probe system weaknessesUndisclosedReportvia SecurityWeek

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.