Security consulting and vCISO acquisitions and funding
155 acquisitions of cybersecurity consulting firms since 2020 and 58 funding rounds since 2022 on record. The most active buyers are Accenture (4), Deloitte (3) and Cerberus Sentinel (3). See the cybersecurity consulting firms in the directory.
Browse other categories
- Managed security services 466
- GRC and compliance automation 230
- AI and LLM security 217
- Fraud and payment fraud prevention 165
- Application security testing 162
- Identity and access management 159
- Encryption and key management 156
- Threat intelligence 148
- Security awareness and human risk 138
- Attack surface management 112
Deals
Showing 1 to 50 of 155
| Date | Deal | Amount | Source |
|---|---|---|---|
| September 2026 | IBM acquired Logiq ConsultingCybersecurity consultancy for UK defence, government and critical infrastructure sectors | Undisclosed | Report on IBM buying Logiq Consulting, September 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| August 2026 | AXA XL acquired S-RMAdvisers on business spying and digital defence, probing breaches and attacks | Undisclosed | Report on AXA XL buying S-RM, August 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2026 | Databarracks acquired AcumenBusiness continuity and resilience consultancy serving financial, healthcare and manufacturing clients | Undisclosed | Report on Databarracks buying Acumen, July 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2026 | Bank of America acquired MDSec Consulting LimitedBusiness gives advice on keeping information safe with roughly sixty five experts | Undisclosed | Report on Bank of America buying MDSec Consulting Limited, July 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2026 | Woven acquired InsignisProvides systems engineering and software development for critical cyber operations | Undisclosed | Report on Woven buying Insignis, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2026 | Vorbis Ventures acquired OptivAdvisory, consulting and transformation project-based cybersecurity services business | Undisclosed | Report on Vorbis Ventures buying Optiv, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2026 | Viatel acquired FullProxyScottish cybersecurity consultancy offering cyber resilience and infrastructure security expertise | Undisclosed | Report on Viatel buying FullProxy, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2026 | Cegeka acquired 3PointBelgian cybersecurity and IT consulting for defence and public safety | Undisclosed | Report on Cegeka buying 3Point, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2026 | TekStream acquired ImagineXCyber strategy, vCISO, GRC, exposure management and IAM services | Undisclosed | Report on TekStream buying ImagineX, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2026 | Netum Group acquired Cyberwatch OyFinnish cyber security company offering services that meet legislation requirements | Undisclosed | Report on Netum Group buying Cyberwatch Oy, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2026 | ADVANS Group acquired CORALIUMCybersecurity consulting firm offering audits, penetration testing and CISO services | Undisclosed | Report on ADVANS Group buying CORALIUM, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2026 | K2 Integrity acquired Leviathan Security GroupDesigns and delivers cybersecurity services and programmes for influential companies | Undisclosed | Report on K2 Integrity buying Leviathan Security Group, March 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2026 | Infotrust acquired Catalyst CyberProvides federal government cybersecurity accreditations and assessments | Undisclosed | Report on Infotrust buying Catalyst Cyber, March 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2026 | BTMS acquired Integrity Consulting, Engineering & Security SolutionsProvides defence, security and mission support services to government | Undisclosed | Report on BTMS buying Integrity Consulting, Engineering & Security Solutions, March 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2026 | Woven Solutions acquired ValenceStrategy and capabilities firm for national security mission planning and AI integration | Undisclosed | Report on Woven Solutions buying Valence, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2026 | Sophos acquired Arco CyberUK cybersecurity assurance company helping organisations improve their security posture | Undisclosed | Report on Sophos buying Arco Cyber, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2026 | Markon acquired MillenniumCyber operations, engineering, analysis, testing and training for defence | Undisclosed | Report on Markon buying Millennium, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2026 | Booz Allen Hamilton acquired Defy SecurityCybersecurity services and consulting firm | Undisclosed | Report on Booz Allen Hamilton buying Defy Security, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2026 | Arctiq acquired VerinextTechnology services firm covering managed services, infrastructure, networking and enterprise security | Undisclosed | Report on Arctiq buying Verinext, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2026 | Horizon Capital acquired ThreatscapPure-play cyber security consultancy offering services and solutions | Undisclosed | Report on Horizon Capital buying Threatscap, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| December 2025 | Synergy ECP acquired NetServicesSecure federal IT modernisation, software engineering, cybersecurity and enterprise operations | Undisclosed | Report on Synergy ECP buying NetServices, December 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| December 2025 | Red River acquired InvictusNational security services provider with cyber, intelligence and enterprise modernisation capabilities | Undisclosed | Report on Red River buying Invictus, December 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| December 2025 | Bastion acquired Phronesis SecurityProvides cyber security audit, assurance and technical assessment services | Undisclosed | Report on Bastion buying Phronesis Security, December 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| December 2025 | Aretum acquired Veterans EngineeringSupplies government bodies with digital and cloud protection skills | Undisclosed | Report on Aretum buying Veterans Engineering, December 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2025 | Amplix acquired 24By7SecurityCybersecurity consulting and compliance firm | Undisclosed | Report on Amplix buying 24By7Security, November 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2025 | Allurity acquired Monti Stampa Furrer & Partners (MSF Partners)Skilled people who guard vital property and key systems | Undisclosed | Report on Allurity buying Monti Stampa Furrer & Partners (MSF Partners), November 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2025 | Fortified Health Security acquired LatitudeHealthcare cybersecurity advisory firm for HITRUST, risk and third-party risk | Undisclosed | Report on Fortified Health Security buying Latitude, September 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2025 | Nautic Partners acquired AccessITProvides advanced security services for designing and operating cybersecurity programmes | Undisclosed | Report on Nautic Partners buying AccessIT, July 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2025 | LevelBlue acquired Trustwave Holdings | Undisclosed | Report on LevelBlue buying Trustwave Holdings, July 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2025 | LevelBlue acquired AonCybersecurity and intellectual property litigation consulting groups | Undisclosed | Report on LevelBlue buying Aon, June 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| May 2025 | Qubika acquired Nitra SecurityCybersecurity advisory, assurance and engineering services | Undisclosed | Report on Qubika buying Nitra Security, May 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2025 | Allurity acquired Infigo ISA Croatian business offering attack and defence work, advice, managed help and building products | Undisclosed | Report on Allurity buying Infigo IS, April 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2025 | Ridgeline International acquired System High CorporationGlobal protection and security engineering services provider | Undisclosed | Report on Ridgeline International buying System High Corporation, March 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2025 | Brennan acquired CBR CyberCybersecurity consulting, engineering and services for public sector agencies | Undisclosed | Report on Brennan buying CBR Cyber, March 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2025 | Neqst acquired WithSecureProvides cybersecurity consulting services as a business unit | $23m | Report on Neqst buying WithSecure, January 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2025 | CGI acquired BJSSUK technology and engineering consultancy offering software, cloud and cybersecurity services | Undisclosed | Report on CGI buying BJSS, January 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2024 | SysGroup acquired Crossword CybersecurityConsulting arm of a cybersecurity company | Undisclosed | Report on SysGroup buying Crossword Cybersecurity, November 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2024 | Cybereason acquired Trustwave Holdings | Undisclosed | Report on Cybereason buying Trustwave Holdings, November 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2024 | Compugen acquired SynerSolutionsProvides cybersecurity services for defence with federal government clearance expertise | Undisclosed | Report on Compugen buying SynerSolutions, November 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2024 | TAC Infosec acquired TAC Cyber Security ConsultancyProvides cybersecurity consultancy services. | Undisclosed | Report on TAC Infosec buying TAC Cyber Security Consultancy, September 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2024 | General Dynamics Information Technology (GDIT) acquired Iron EagleXProvides AI, machine learning, cyber, software development and cloud services | Undisclosed | Report on General Dynamics Information Technology (GDIT) buying Iron EagleX, September 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| August 2024 | Nortal acquired 3DOT SolutionsUK cybersecurity consultancy | Undisclosed | Report on Nortal buying 3DOT Solutions, August 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2024 | SIXGEN acquired Secure Enterprise EngineeringBuilds and runs defensive systems for military and government clients | Undisclosed | Report on SIXGEN buying Secure Enterprise Engineering, July 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2024 | Neovera acquired Emagined SecurityProfessional services for information security and compliance in regulated industries | Undisclosed | Report on Neovera buying Emagined Security, July 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2024 | Bureau Veritas Cybersecurity acquired Security InnovationProvides software security consulting, testing, secure development advice and training | Undisclosed | Report on Bureau Veritas Cybersecurity buying Security Innovation, July 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| May 2024 | Bernhard acquired ApogeeGovernment technology provider delivering program management, modernisation and cybersecurity solutions | Undisclosed | Report on Bernhard buying Apogee, May 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2024 | VTG acquired Vana SolutionsDigital transformation firm delivering secure cloud, data fabric and analytics for national security | Undisclosed | Report on VTG buying Vana Solutions, April 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2024 | Seisma acquired Q1 GroupProfessional services consultancy for cyber security, risk, compliance and fraud | Undisclosed | Report on Seisma buying Q1 Group, April 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2024 | Bridewell acquired Arculus Cyber SecurityPublic sector cyber security consultancy offering security architecture, risk management, audit and review | Undisclosed | Report on Bridewell buying Arculus Cyber Security, March 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2024 | C3 Complete acquired Compliance SolutionsA security division supplying virtual CISO work, penetration tests and vulnerability checks | Undisclosed | Report on C3 Complete buying Compliance Solutions, January 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.