cybersecdirectory

Penetration testing acquisitions and funding

53 acquisitions of penetration testing companies since 2020 and 48 funding rounds since 2022 on record. The most active buyers are Quadrant Private Equity (3), NetSPI (2) and Aikido Security (2). See the penetration testing companies in the directory.

12acquisitions
12funding rounds
$62mpaid in the 1 acquisition with a disclosed price
$249.1mraised in the 11 rounds with a disclosed size
Browse other categories

Showing 1 to 24 of 24

DateDealAmountSource
December 2025Limerston Capital acquired AristiCHECK and CREST-accredited Birmingham-based cyber security consultancy with over 15 years of experience delivering penetration testing, red teaming, and OT security assessments for government and private sector clients.UndisclosedReportvia SecurityWeek
December 2025Infinum acquired AMR CyberSecurityPenetration testing and security consulting servicesUndisclosedReportvia SecurityWeek
November 2025SpecterOps raised fundingAdversary-focused security firm created by former DoD red team operators. Creators of BloodHound. CREST-accredited for penetration testing, red teaming, and purple team assessments.$30mReportvia Security, Funded
November 2025Twenty Technologies raised a Series A roundInvestor Caffeinated Capital$38mReportvia Security, Funded
November 2025Saepio acquired RupturaOffensive security specialist providing penetration testing servicesUndisclosedReportvia SecurityWeek
November 2025Pentera acquired EVA Information SecurityOffensive security firm doing AI red teaming and penetration testingUndisclosedReportvia SecurityWeek
September 2025Unit 221b raised a seed roundInvestor J2 Ventures$5mReportvia Security, Funded
September 2025Aikido Security acquired HaickerTurns elite human hacking into autonomous penetration testing systemsUndisclosedReportvia SecurityWeek
September 2025Aikido Security acquired AllseekBuilds AI agents that act as real attackers for pentestingUndisclosedReportvia SecurityWeek
August 2025Cryptic Vector acquired Caesar Creek SoftwareOffensive cyber research, vulnerability analysis, exploit development and reverse engineeringUndisclosedReportvia SecurityWeek
July 2025Haicker raised a seed roundInvestor Project Europe$229kReport
July 2025Haicker raised a pre-seed roundInvestor Founderful Campus$31kReport
June 2025ThreatSpike Red raised a Series A roundLondon-based cybersecurity firm offering unlimited, fixed-price penetration testing and red teaming services with ISO 27001 certification and a unique subscription model.Investor Expedition Growth Capital$14mReportvia Security, Funded
June 2025Melius CyberSafe raised fundingInvestor North East Fund$338kReportvia Security, Funded
June 2025Truesec acquired BanshiePenetration testing, red teaming and ethical hacking servicesUndisclosedReportvia SecurityWeek
May 2025Horizon3 raised fundingHorizon3 runs autonomous attack testing to find and verify exploitable weaknesses in production environments.$73mReportvia Security, Funded
May 2025Tulsi received a grantInvestor NC IDEA$10kReport
April 2025Infosys acquired The Missing LinkSydney-headquartered Australian cybersecurity firm founded in 1997, now part of Infosys. CREST-approved with OSCP, OSCE, and OSEE-certified testers.$62mReportvia SecurityWeek
April 2025Cyber Advisors acquired Stratum SecurityInformation security consulting firm offering assessment and threat simulation servicesUndisclosedReportvia SecurityWeek
March 2025Strike raised a Series A roundInvestor FinTech Collective$13.5mReportvia Security, Funded
March 2025Evolve Security raised fundingUndisclosedReportvia Security, Funded
March 2025SpecterOps raised a Series B roundAdversary-focused security firm created by former DoD red team operators. Creators of BloodHound. CREST-accredited for penetration testing, red teaming, and purple team assessments.Investor Insight Partners$75mReportvia Security, Funded
February 2025TAC Security acquired CyberScopeGreek web3 security firm doing smart contract and blockchain auditsUndisclosedReportvia SecurityWeek
January 2025Inherent acquired DevensysCyber resilience services including penetration testing, SOC monitoring, incident response and trainingUndisclosedReportvia SecurityWeek

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.