Security consulting and vCISO acquisitions and funding
155 acquisitions of cybersecurity consulting firms since 2020 and 58 funding rounds since 2022 on record. The most active buyers are Accenture (4), Deloitte (3) and Cerberus Sentinel (3). See the cybersecurity consulting firms in the directory.
Browse other categories
- Managed security services 466
- GRC and compliance automation 230
- AI and LLM security 217
- Fraud and payment fraud prevention 165
- Application security testing 162
- Identity and access management 159
- Encryption and key management 156
- Threat intelligence 148
- Security awareness and human risk 138
- Attack surface management 112
Deals
Showing 1 to 16 of 16
| Date | Deal | Amount | Source |
|---|---|---|---|
| December 2025 | Synergy ECP acquired NetServicesSecure federal IT modernisation, software engineering, cybersecurity and enterprise operations | Undisclosed | Report on Synergy ECP buying NetServices, December 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| December 2025 | Red River acquired InvictusNational security services provider with cyber, intelligence and enterprise modernisation capabilities | Undisclosed | Report on Red River buying Invictus, December 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| December 2025 | Bastion acquired Phronesis SecurityProvides cyber security audit, assurance and technical assessment services | Undisclosed | Report on Bastion buying Phronesis Security, December 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| December 2025 | Aretum acquired Veterans EngineeringSupplies government bodies with digital and cloud protection skills | Undisclosed | Report on Aretum buying Veterans Engineering, December 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2025 | Amplix acquired 24By7SecurityCybersecurity consulting and compliance firm | Undisclosed | Report on Amplix buying 24By7Security, November 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| November 2025 | Allurity acquired Monti Stampa Furrer & Partners (MSF Partners)Skilled people who guard vital property and key systems | Undisclosed | Report on Allurity buying Monti Stampa Furrer & Partners (MSF Partners), November 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| September 2025 | Fortified Health Security acquired LatitudeHealthcare cybersecurity advisory firm for HITRUST, risk and third-party risk | Undisclosed | Report on Fortified Health Security buying Latitude, September 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2025 | Nautic Partners acquired AccessITProvides advanced security services for designing and operating cybersecurity programmes | Undisclosed | Report on Nautic Partners buying AccessIT, July 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2025 | LevelBlue acquired Trustwave Holdings | Undisclosed | Report on LevelBlue buying Trustwave Holdings, July 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2025 | LevelBlue acquired AonCybersecurity and intellectual property litigation consulting groups | Undisclosed | Report on LevelBlue buying Aon, June 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| May 2025 | Qubika acquired Nitra SecurityCybersecurity advisory, assurance and engineering services | Undisclosed | Report on Qubika buying Nitra Security, May 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2025 | Allurity acquired Infigo ISA Croatian business offering attack and defence work, advice, managed help and building products | Undisclosed | Report on Allurity buying Infigo IS, April 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2025 | Ridgeline International acquired System High CorporationGlobal protection and security engineering services provider | Undisclosed | Report on Ridgeline International buying System High Corporation, March 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2025 | Brennan acquired CBR CyberCybersecurity consulting, engineering and services for public sector agencies | Undisclosed | Report on Brennan buying CBR Cyber, March 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2025 | Neqst acquired WithSecureProvides cybersecurity consulting services as a business unit | $23m | Report on Neqst buying WithSecure, January 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2025 | CGI acquired BJSSUK technology and engineering consultancy offering software, cloud and cybersecurity services | Undisclosed | Report on CGI buying BJSS, January 2025 (opens in a new tab)via SecurityWeek (opens in a new tab) |
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.