cybersecdirectory

Security consulting and vCISO acquisitions and funding

155 acquisitions of cybersecurity consulting firms since 2020 and 58 funding rounds since 2022 on record. The most active buyers are Accenture (4), Deloitte (3) and Cerberus Sentinel (3). See the cybersecurity consulting firms in the directory.

155acquisitions
$9.3bnpaid in the 15 acquisitions with a disclosed price
Browse other categories

Deals

Showing 1 to 50 of 155

DateDealAmountSource
September 2026IBM acquired Logiq ConsultingCybersecurity consultancy for UK defence, government and critical infrastructure sectorsUndisclosedReport on IBM buying Logiq Consulting, September 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
August 2026AXA XL acquired S-RMAdvisers on business spying and digital defence, probing breaches and attacksUndisclosedReport on AXA XL buying S-RM, August 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
July 2026Databarracks acquired AcumenBusiness continuity and resilience consultancy serving financial, healthcare and manufacturing clientsUndisclosedReport on Databarracks buying Acumen, July 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
July 2026Bank of America acquired MDSec Consulting LimitedBusiness gives advice on keeping information safe with roughly sixty five expertsUndisclosedReport on Bank of America buying MDSec Consulting Limited, July 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
June 2026Woven acquired InsignisProvides systems engineering and software development for critical cyber operationsUndisclosedReport on Woven buying Insignis, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
June 2026Vorbis Ventures acquired OptivAdvisory, consulting and transformation project-based cybersecurity services businessUndisclosedReport on Vorbis Ventures buying Optiv, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
June 2026Viatel acquired FullProxyScottish cybersecurity consultancy offering cyber resilience and infrastructure security expertiseUndisclosedReport on Viatel buying FullProxy, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
June 2026Cegeka acquired 3PointBelgian cybersecurity and IT consulting for defence and public safetyUndisclosedReport on Cegeka buying 3Point, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
April 2026TekStream acquired ImagineXCyber strategy, vCISO, GRC, exposure management and IAM servicesUndisclosedReport on TekStream buying ImagineX, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
April 2026Netum Group acquired Cyberwatch OyFinnish cyber security company offering services that meet legislation requirementsUndisclosedReport on Netum Group buying Cyberwatch Oy, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
April 2026ADVANS Group acquired CORALIUMCybersecurity consulting firm offering audits, penetration testing and CISO servicesUndisclosedReport on ADVANS Group buying CORALIUM, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
March 2026K2 Integrity acquired Leviathan Security GroupDesigns and delivers cybersecurity services and programmes for influential companiesUndisclosedReport on K2 Integrity buying Leviathan Security Group, March 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
March 2026Infotrust acquired Catalyst CyberProvides federal government cybersecurity accreditations and assessmentsUndisclosedReport on Infotrust buying Catalyst Cyber, March 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
March 2026BTMS acquired Integrity Consulting, Engineering & Security SolutionsProvides defence, security and mission support services to governmentUndisclosedReport on BTMS buying Integrity Consulting, Engineering & Security Solutions, March 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
February 2026Woven Solutions acquired ValenceStrategy and capabilities firm for national security mission planning and AI integrationUndisclosedReport on Woven Solutions buying Valence, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
February 2026Sophos acquired Arco CyberUK cybersecurity assurance company helping organisations improve their security postureUndisclosedReport on Sophos buying Arco Cyber, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
February 2026Markon acquired MillenniumCyber operations, engineering, analysis, testing and training for defenceUndisclosedReport on Markon buying Millennium, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
February 2026Booz Allen Hamilton acquired Defy SecurityCybersecurity services and consulting firmUndisclosedReport on Booz Allen Hamilton buying Defy Security, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
February 2026Arctiq acquired VerinextTechnology services firm covering managed services, infrastructure, networking and enterprise securityUndisclosedReport on Arctiq buying Verinext, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
January 2026Horizon Capital acquired ThreatscapPure-play cyber security consultancy offering services and solutionsUndisclosedReport on Horizon Capital buying Threatscap, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab)
December 2025Synergy ECP acquired NetServicesSecure federal IT modernisation, software engineering, cybersecurity and enterprise operationsUndisclosedReport on Synergy ECP buying NetServices, December 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
December 2025Red River acquired InvictusNational security services provider with cyber, intelligence and enterprise modernisation capabilitiesUndisclosedReport on Red River buying Invictus, December 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
December 2025Bastion acquired Phronesis SecurityProvides cyber security audit, assurance and technical assessment servicesUndisclosedReport on Bastion buying Phronesis Security, December 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
December 2025Aretum acquired Veterans EngineeringSupplies government bodies with digital and cloud protection skillsUndisclosedReport on Aretum buying Veterans Engineering, December 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
November 2025Amplix acquired 24By7SecurityCybersecurity consulting and compliance firmUndisclosedReport on Amplix buying 24By7Security, November 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
November 2025Allurity acquired Monti Stampa Furrer & Partners (MSF Partners)Skilled people who guard vital property and key systemsUndisclosedReport on Allurity buying Monti Stampa Furrer & Partners (MSF Partners), November 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
September 2025Fortified Health Security acquired LatitudeHealthcare cybersecurity advisory firm for HITRUST, risk and third-party riskUndisclosedReport on Fortified Health Security buying Latitude, September 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
July 2025Nautic Partners acquired AccessITProvides advanced security services for designing and operating cybersecurity programmesUndisclosedReport on Nautic Partners buying AccessIT, July 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
July 2025LevelBlue acquired Trustwave HoldingsUndisclosedReport on LevelBlue buying Trustwave Holdings, July 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
June 2025LevelBlue acquired AonCybersecurity and intellectual property litigation consulting groupsUndisclosedReport on LevelBlue buying Aon, June 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
May 2025Qubika acquired Nitra SecurityCybersecurity advisory, assurance and engineering servicesUndisclosedReport on Qubika buying Nitra Security, May 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
April 2025Allurity acquired Infigo ISA Croatian business offering attack and defence work, advice, managed help and building productsUndisclosedReport on Allurity buying Infigo IS, April 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
March 2025Ridgeline International acquired System High CorporationGlobal protection and security engineering services providerUndisclosedReport on Ridgeline International buying System High Corporation, March 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
March 2025Brennan acquired CBR CyberCybersecurity consulting, engineering and services for public sector agenciesUndisclosedReport on Brennan buying CBR Cyber, March 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
January 2025Neqst acquired WithSecureProvides cybersecurity consulting services as a business unit$23mReport on Neqst buying WithSecure, January 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
January 2025CGI acquired BJSSUK technology and engineering consultancy offering software, cloud and cybersecurity servicesUndisclosedReport on CGI buying BJSS, January 2025 (opens in a new tab)via SecurityWeek (opens in a new tab)
November 2024SysGroup acquired Crossword CybersecurityConsulting arm of a cybersecurity companyUndisclosedReport on SysGroup buying Crossword Cybersecurity, November 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
November 2024Cybereason acquired Trustwave HoldingsUndisclosedReport on Cybereason buying Trustwave Holdings, November 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
November 2024Compugen acquired SynerSolutionsProvides cybersecurity services for defence with federal government clearance expertiseUndisclosedReport on Compugen buying SynerSolutions, November 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
September 2024TAC Infosec acquired TAC Cyber Security ConsultancyProvides cybersecurity consultancy services.UndisclosedReport on TAC Infosec buying TAC Cyber Security Consultancy, September 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
September 2024General Dynamics Information Technology (GDIT) acquired Iron EagleXProvides AI, machine learning, cyber, software development and cloud servicesUndisclosedReport on General Dynamics Information Technology (GDIT) buying Iron EagleX, September 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
August 2024Nortal acquired 3DOT SolutionsUK cybersecurity consultancyUndisclosedReport on Nortal buying 3DOT Solutions, August 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
July 2024SIXGEN acquired Secure Enterprise EngineeringBuilds and runs defensive systems for military and government clientsUndisclosedReport on SIXGEN buying Secure Enterprise Engineering, July 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
July 2024Neovera acquired Emagined SecurityProfessional services for information security and compliance in regulated industriesUndisclosedReport on Neovera buying Emagined Security, July 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
July 2024Bureau Veritas Cybersecurity acquired Security InnovationProvides software security consulting, testing, secure development advice and trainingUndisclosedReport on Bureau Veritas Cybersecurity buying Security Innovation, July 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
May 2024Bernhard acquired ApogeeGovernment technology provider delivering program management, modernisation and cybersecurity solutionsUndisclosedReport on Bernhard buying Apogee, May 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
April 2024VTG acquired Vana SolutionsDigital transformation firm delivering secure cloud, data fabric and analytics for national securityUndisclosedReport on VTG buying Vana Solutions, April 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
April 2024Seisma acquired Q1 GroupProfessional services consultancy for cyber security, risk, compliance and fraudUndisclosedReport on Seisma buying Q1 Group, April 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
March 2024Bridewell acquired Arculus Cyber SecurityPublic sector cyber security consultancy offering security architecture, risk management, audit and reviewUndisclosedReport on Bridewell buying Arculus Cyber Security, March 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)
January 2024C3 Complete acquired Compliance SolutionsA security division supplying virtual CISO work, penetration tests and vulnerability checksUndisclosedReport on C3 Complete buying Compliance Solutions, January 2024 (opens in a new tab)via SecurityWeek (opens in a new tab)

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.