Security consulting and vCISO acquisitions and funding
155 acquisitions of cybersecurity consulting firms since 2020 and 58 funding rounds since 2022 on record. The most active buyers are Accenture (4), Deloitte (3) and Cerberus Sentinel (3). See the cybersecurity consulting firms in the directory.
Browse other categories
- Managed security services 466
- GRC and compliance automation 230
- AI and LLM security 217
- Fraud and payment fraud prevention 165
- Application security testing 162
- Identity and access management 159
- Encryption and key management 156
- Threat intelligence 148
- Security awareness and human risk 138
- Attack surface management 112
Deals
Showing 1 to 20 of 20
| Date | Deal | Amount | Source |
|---|---|---|---|
| September 2026 | IBM acquired Logiq ConsultingCybersecurity consultancy for UK defence, government and critical infrastructure sectors | Undisclosed | Report on IBM buying Logiq Consulting, September 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| August 2026 | AXA XL acquired S-RMAdvisers on business spying and digital defence, probing breaches and attacks | Undisclosed | Report on AXA XL buying S-RM, August 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2026 | Databarracks acquired AcumenBusiness continuity and resilience consultancy serving financial, healthcare and manufacturing clients | Undisclosed | Report on Databarracks buying Acumen, July 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2026 | Bank of America acquired MDSec Consulting LimitedBusiness gives advice on keeping information safe with roughly sixty five experts | Undisclosed | Report on Bank of America buying MDSec Consulting Limited, July 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2026 | Woven acquired InsignisProvides systems engineering and software development for critical cyber operations | Undisclosed | Report on Woven buying Insignis, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2026 | Vorbis Ventures acquired OptivAdvisory, consulting and transformation project-based cybersecurity services business | Undisclosed | Report on Vorbis Ventures buying Optiv, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2026 | Viatel acquired FullProxyScottish cybersecurity consultancy offering cyber resilience and infrastructure security expertise | Undisclosed | Report on Viatel buying FullProxy, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2026 | Cegeka acquired 3PointBelgian cybersecurity and IT consulting for defence and public safety | Undisclosed | Report on Cegeka buying 3Point, June 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2026 | TekStream acquired ImagineXCyber strategy, vCISO, GRC, exposure management and IAM services | Undisclosed | Report on TekStream buying ImagineX, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2026 | Netum Group acquired Cyberwatch OyFinnish cyber security company offering services that meet legislation requirements | Undisclosed | Report on Netum Group buying Cyberwatch Oy, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| April 2026 | ADVANS Group acquired CORALIUMCybersecurity consulting firm offering audits, penetration testing and CISO services | Undisclosed | Report on ADVANS Group buying CORALIUM, April 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2026 | K2 Integrity acquired Leviathan Security GroupDesigns and delivers cybersecurity services and programmes for influential companies | Undisclosed | Report on K2 Integrity buying Leviathan Security Group, March 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2026 | Infotrust acquired Catalyst CyberProvides federal government cybersecurity accreditations and assessments | Undisclosed | Report on Infotrust buying Catalyst Cyber, March 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| March 2026 | BTMS acquired Integrity Consulting, Engineering & Security SolutionsProvides defence, security and mission support services to government | Undisclosed | Report on BTMS buying Integrity Consulting, Engineering & Security Solutions, March 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2026 | Woven Solutions acquired ValenceStrategy and capabilities firm for national security mission planning and AI integration | Undisclosed | Report on Woven Solutions buying Valence, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2026 | Sophos acquired Arco CyberUK cybersecurity assurance company helping organisations improve their security posture | Undisclosed | Report on Sophos buying Arco Cyber, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2026 | Markon acquired MillenniumCyber operations, engineering, analysis, testing and training for defence | Undisclosed | Report on Markon buying Millennium, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2026 | Booz Allen Hamilton acquired Defy SecurityCybersecurity services and consulting firm | Undisclosed | Report on Booz Allen Hamilton buying Defy Security, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2026 | Arctiq acquired VerinextTechnology services firm covering managed services, infrastructure, networking and enterprise security | Undisclosed | Report on Arctiq buying Verinext, February 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| January 2026 | Horizon Capital acquired ThreatscapPure-play cyber security consultancy offering services and solutions | Undisclosed | Report on Horizon Capital buying Threatscap, January 2026 (opens in a new tab)via SecurityWeek (opens in a new tab) |
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.