cybersecdirectory

Penetration testing acquisitions and funding

53 acquisitions of penetration testing companies since 2020 and 48 funding rounds since 2022 on record. The most active buyers are Quadrant Private Equity (3), NetSPI (2) and Aikido Security (2). See the penetration testing companies in the directory.

12acquisitions
$62mpaid in the 1 acquisition with a disclosed price
Browse other categories

Showing 1 to 12 of 12

DateDealAmountSource
December 2025Limerston Capital acquired AristiCHECK and CREST-accredited Birmingham-based cyber security consultancy with over 15 years of experience delivering penetration testing, red teaming, and OT security assessments for government and private sector clients.UndisclosedReportvia SecurityWeek
December 2025Infinum acquired AMR CyberSecurityPenetration testing and security consulting servicesUndisclosedReportvia SecurityWeek
November 2025Saepio acquired RupturaOffensive security specialist providing penetration testing servicesUndisclosedReportvia SecurityWeek
November 2025Pentera acquired EVA Information SecurityOffensive security firm doing AI red teaming and penetration testingUndisclosedReportvia SecurityWeek
September 2025Aikido Security acquired HaickerTurns elite human hacking into autonomous penetration testing systemsUndisclosedReportvia SecurityWeek
September 2025Aikido Security acquired AllseekBuilds AI agents that act as real attackers for pentestingUndisclosedReportvia SecurityWeek
August 2025Cryptic Vector acquired Caesar Creek SoftwareOffensive cyber research, vulnerability analysis, exploit development and reverse engineeringUndisclosedReportvia SecurityWeek
June 2025Truesec acquired BanshiePenetration testing, red teaming and ethical hacking servicesUndisclosedReportvia SecurityWeek
April 2025Infosys acquired The Missing LinkSydney-headquartered Australian cybersecurity firm founded in 1997, now part of Infosys. CREST-approved with OSCP, OSCE, and OSEE-certified testers.$62mReportvia SecurityWeek
April 2025Cyber Advisors acquired Stratum SecurityInformation security consulting firm offering assessment and threat simulation servicesUndisclosedReportvia SecurityWeek
February 2025TAC Security acquired CyberScopeGreek web3 security firm doing smart contract and blockchain auditsUndisclosedReportvia SecurityWeek
January 2025Inherent acquired DevensysCyber resilience services including penetration testing, SOC monitoring, incident response and trainingUndisclosedReportvia SecurityWeek

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.