Penetration testing acquisitions and funding
53 acquisitions of penetration testing companies since 2020 and 48 funding rounds since 2022 on record. The most active buyers are Quadrant Private Equity (3), NetSPI (2) and Aikido Security (2). See the penetration testing companies in the directory.
Browse other categories
- Managed security services 466
- GRC and compliance automation 230
- AI and LLM security 217
- Security consulting and vCISO 213
- Fraud and payment fraud prevention 165
- Application security testing 162
- Identity and access management 159
- Encryption and key management 156
- Threat intelligence 148
- Security awareness and human risk 138
Deals
Showing 1 to 6 of 6
| Date | Deal | Amount | Source |
|---|---|---|---|
| September 2026 | NetSPI acquired SynackFedRAMP-authorized crowdsourced penetration testing platform combining the vetted SRT researcher community with AI-powered Hydra technology for continuous security testing. | Undisclosed | Report on NetSPI buying Synack, September 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2026 | A-LIGN acquired PathfynderProvides penetration testing, red teaming and incident response services | Undisclosed | Report on A-LIGN buying Pathfynder, September 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2026 | DataExpert Group acquired ADO SecurityOffensive and defensive security services provider | Undisclosed | Report on DataExpert Group buying ADO Security, July 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2026 | Valiant Solutions acquired BreakPoint LabsDelivers AI-enabled cyber operations, threat emulation, red teaming and DevSecOps | Undisclosed | Report on Valiant Solutions buying BreakPoint Labs, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2026 | SafeHill acquired Arcane SecurityOffensive security firm specialising in autonomous AI penetration testing and application security | Undisclosed | Report on SafeHill buying Arcane Security, March 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2026 | Littlefish acquired Stripe OLTAward-winning CREST-certified managed cyber security and IT support provider with offices in Bristol, London, and Manchester, specialising in penetration testing and Microsoft security technologies. | Undisclosed | Report on Littlefish buying Stripe OLT, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.