cybersecdirectory

Security awareness and human risk acquisitions and funding

49 acquisitions of security awareness training providers since 2020 and 89 funding rounds since 2022 on record. The most active buyers are MetaCompliance (3), NINJIO (2) and ThriveDX (2). See the security awareness training providers in the directory.

49acquisitions
$4.9bnpaid in the 6 acquisitions with a disclosed price
Browse other categories

Showing 1 to 49 of 49

DateDealAmountSource
October 2026EC-Council acquired Cyber Insurance AcademyUndisclosedReportvia SecurityWeek
October 2026Aikido Security acquired OutKeptPhishing simulations and security awareness trainingUndisclosedReportvia SecurityWeek
September 2026Pistachio acquired Hugin.ioNorwegian cyber-risk management platform, intellectual property acquired for compliance productUndisclosedReportvia SecurityWeek
August 2026SEPPmail acquired CyberPilotProvides security awareness training and phishing simulation for employeesUndisclosedReportvia SecurityWeek
July 2026NINJIO acquired SafeStackDeveloper, security and application security training platform for secure codingUndisclosedReportvia SecurityWeek
July 2026CyberNut acquired Neptune NavigateDigital citizenship platform for student safety in K-12 school districtsUndisclosedReportvia SecurityWeek
June 2026Mthree acquired CAPSLOCKTrains adults for cyber careers and provides cybersecurity education to employersUndisclosedReportvia SecurityWeek
April 2026Fortra acquired Zero-Point SecurityProvides cybersecurity training in red teaming and penetration testingUndisclosedReportvia SecurityWeek
February 2026QuickStart acquired IronCircleTeaches cyber skills and staff preparedness through AIUndisclosedReportvia SecurityWeek
December 2025Symposit acquired HumanLinkHuman factors engineering consultancy for aviation and transportation security trainingUndisclosedReportvia SecurityWeek
December 2025MetaCompliance acquired JunglemapSecurity and compliance awareness training using NanoLearning methodologyUndisclosedReportvia SecurityWeek
September 2025Hack the Box acquired LetsDefendHands-on cyber defence training platform for blue team professionalsUndisclosedReportvia SecurityWeek
March 2025Cyber Guru acquired MantraA French new company teaching staff about safety and keeping them safeUndisclosedReportvia SecurityWeek
January 2025Hook Security acquired HaekkaSlack-first platform delivering bite-sized security awareness trainingUndisclosedReportvia SecurityWeek
December 2024Keensight Capital acquired MetaComplianceProvides cybersecurity and compliance software for user training and human risk managementUndisclosedReportvia SecurityWeek
November 2024H.I.G. Capital and Thoma Bravo acquired CompTIAIT certification and training business covering cybersecurity and other technologiesUndisclosedReportvia SecurityWeek
November 2024Canary IT acquired Layer 8 SecurityProvides cybersecurity awareness training and consulting, including gamified escape room learning experiencesUndisclosedReportvia SecurityWeek
October 2024Leeds Equity Partners acquired OffSecProvides continuous cybersecurity workforce training and educationUndisclosedReportvia SecurityWeek
April 2024OPSWAT acquired CIP CyberDelivers security training and certification for critical infrastructureUndisclosedReportvia SecurityWeek
February 2024Security Compass acquired KontraProvides application security training softwareUndisclosedReportvia SecurityWeek
January 2024Mimecast acquired Elevate SecurityFocuses on teaching users and building their awarenessUndisclosedReportvia SecurityWeek
December 2023International Association for Business Analytics Certification acquired International Institute for Information SecurityProvides cybersecurity education and training offeringsUndisclosedReportvia SecurityWeek
December 2023ACI Learning acquired Infosec LearningDigital skills learning platform for cybersecurity, cyber ranges and software trainingUndisclosedReportvia SecurityWeek
November 2023MetaCompliance acquired Increase Your SkillsProvides cybersecurity awareness training to organisations in GermanyUndisclosedReportvia SecurityWeek
August 2023Semgrep acquired We Hack PurpleGives lessons and material to coders and security professionalsUndisclosedReportvia SecurityWeek
January 2023Tesserent acquired ALC GroupProvides cybersecurity training for professionals and organisations in Australia$4mReportvia SecurityWeek
October 2022Vista Equity Partners acquired KnowBe4KnowBe4 provides a platform for security awareness training and AI agent security to reduce human risk.$4.6bnReportvia SecurityWeek
October 2022NINJIO acquired DCOYABehaviour-centric cybersecurity provider identifying personal vulnerabilities for awareness trainingUndisclosedReportvia SecurityWeek
September 2022Wonde acquired Secure SchoolsKeeps schools and colleges safe from online threatsUndisclosedReportvia SecurityWeek
September 2022Telesystem acquired Threat ProtectorTeaches staff about online dangers and secures messages and devicesUndisclosedReportvia SecurityWeek
July 2022Huntress acquired CurriculaA platform teaching staff about online dangers and running fake email traps$22mReportvia SecurityWeek
June 2022MetaCompliance acquired MochEdTech company specialising in cybersecurity and compliance solutionsUndisclosedReportvia SecurityWeek
May 2022ThriveDX acquired Lucy SecurityRuns staff training on staying safe online and fake attack exercisesUndisclosedReportvia SecurityWeek
May 2022Hornetsecurity Ltd. acquired IT-SealSecurity awareness training for employeesUndisclosedReportvia SecurityWeek
May 2022HackEDU acquired Security JourneyApplication security training platform for developersUndisclosedReportvia SecurityWeek
April 2022Wyntec acquired Layer 8 SecuritySecurity awareness training firmUndisclosedReportvia SecurityWeek
April 2022HelpSystems acquired Terranova SecurityDelivers fake phishing exercises and lessons on staying secureUndisclosedReportvia SecurityWeek
March 2022ThriveDX acquired KontraProvides application security training to corporate clientsUndisclosedReportvia SecurityWeek
February 2022TitanHQ acquired Cyber Risk AwareProvides security awareness training to organisationsUndisclosedReportvia SecurityWeek
January 2022Cengage Group acquired InfosecProvides cybersecurity education and professional training courses$190.8mReportvia SecurityWeek
November 2021Immersive Labs acquired Snap LabsCreates spaces for cyber training, study and showing toolsUndisclosedReportvia SecurityWeek
October 2021KnowBe4 acquired SecurityAdvisorProvides awareness training and insights into human behaviour$80mReportvia SecurityWeek
October 2021INE acquired Pentester AcademyCloud-based hands-on lab platform for cyber security trainingUndisclosedReportvia SecurityWeek
September 2021Arctic Wolf acquired Habitu8Training platform for security awareness and trainingUndisclosedReportvia SecurityWeek
August 2021HackerU acquired CybintProvides SaaS cyber education and digital skills training$50mReportvia SecurityWeek
April 2021Boxphish acquired PurplephishCyber awareness and training company based in the United KingdomUndisclosedReportvia SecurityWeek
March 2021KnowBe4 acquired MediaPROTeaches staff how to keep information safe and privateUndisclosedReportvia SecurityWeek
November 2020J2 Global Inc acquired Inspired eLearningProvides security awareness training to organisationsUndisclosedReportvia Cybersecurity Ventures
September 2020ElevenPaths acquired iHackLabsCybersecurity training company with platforms and solutionsUndisclosedReportvia Cybersecurity Ventures

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.