cybersecdirectory

SCA acquisitions and funding

24 acquisitions of software supply chain security vendors since 2020 and 78 funding rounds since 2022 on record. The most active buyers are Exiger (3) and Socket (2). See the software supply chain security vendors in the directory.

24acquisitions
78funding rounds
$195mpaid in the 1 acquisition with a disclosed price
$2.2bnraised in the 72 rounds with a disclosed size
Browse other categories

Showing 1 to 50 of 102

DateDealAmountSource
3 Sept 2026AIR Security raised a seed roundInvestors Sequoia Capital and Greenoaks$50mReportvia Security, Funded
September 2026Dragos acquired NetRiseNetRise analyses compiled software to create an inventory of components and identify supply chain risks.UndisclosedReportvia SecurityWeek
September 2026Dark Sky Technology raised an angel round$235kReportvia Security, Funded
July 2026Ossprey Security raised a pre-seed roundOssprey Security is a cybersecurity company that focuses on detecting malicious code in open source dependencies.Investor Episode 1$2.6mReportvia Security, Funded
July 2026Risk Ledger raised a Series B roundInvestor Axiom Equity$32.2mReportvia Security, Funded
July 2026Webacy acquired Trugard LabsSmart contract risk analytics for crypto, including address poisoning detectionUndisclosedReportvia SecurityWeek
June 2026Pi Security raised a Series A roundInvestors Brightmind Partners and Third Point Ventures$25mReportvia Security, Funded
June 2026Accenture acquired NetRiseNetRise analyses compiled software to create an inventory of components and identify supply chain risks.UndisclosedReportvia SecurityWeek
May 2026RevEng raised a Series A roundInvestor NATO Innovation Fund$15mReportvia Security, Funded
May 2026CRACI raised a pre-seed roundCRACI provides build-time software supply chain security and SBOM generation for developers.Investor Lifeline Ventures$1.6mReportvia Security, Funded
May 2026Socket raised a Series C roundInvestor Thrive Capital$60mReportvia Security, Funded
May 2026Boostsecurity.io raised fundingInvestors Accelia Capital, Amiral Ventures, Sorenson Capital and White Star Capital$4mReportvia Security, Funded
April 2026Cloudsmith raised a Series C roundInvestor TCV$72mReportvia Security, Funded
April 2026Socket acquired Secure AnnexKeeps browser, coding tool and AI add-on extensions safeUndisclosedReportvia SecurityWeek
March 2026BlueFlag Security raised a Series A roundInvestors Maverick Ventures and Ten Eleven Ventures$16.5mReportvia Security, Funded
March 2026Lupin & Holmes raised a pre-seed roundInvestors Seedcamp and The Twenty Minute VC$5.9mReportvia Security, Funded
February 2026Zenyard raised a pre-seed roundInvestor Mindset VenturesUndisclosedReportvia Security, Funded
February 2026Caspia Technologies raised funding$5mReportvia Security, Funded
February 2026RAPIDFORT raised a Series A roundInvestors Blue Cloud Ventures and Forgepoint Capital$42mReportvia Security, Funded
November 2025CodeNotary raised funding$16.5mReportvia Security, Funded
October 2025Chainguard raised debt fundingChainguard builds hardened, verified open source container images, libraries and packages to reduce vulnerabilities.Investor General Catalyst$280mReportvia Security, Funded
July 2025HeroDevs raised private equity fundingInvestor PSG Equity$125mReportvia Security, Funded
June 2025zeroRISC raised a seed roundInvestor Fontinalis Partners$10mReportvia Security, Funded
June 2025ONEKEY raised a Series B roundONEKEY provides a platform for product cybersecurity and compliance, automating SBOM analysis, vulnerability detection, and regulatory compliance.Investor YZi LabsUndisclosedReportvia Security, Funded
May 2025Ox Security raised a Series B roundInvestor DTCP$60mReportvia Security, Funded
May 2025Minimus raised a seed roundInvestors YL Ventures and Mayfield Fund$51mReportvia Security, Funded
April 2025Manifest raised a Series A roundSBOM and vulnerability management platform that helps carmakers and suppliers track risk in vehicle software.Investor Ensemble VC$15mReportvia Security, Funded
April 2025Chainguard raised a Series D roundChainguard builds hardened, verified open source container images, libraries and packages to reduce vulnerabilities.Investors IVP and Kleiner Perkins$356mReportvia Security, Funded
April 2025NetRise raised a Series A roundNetRise analyses compiled software to create an inventory of components and identify supply chain risks.Investor DNX Ventures$10mReportvia Security, Funded
April 2025Socket acquired CoanaBuilds static analysis and reachability engine for software composition analysisUndisclosedReportvia SecurityWeek
March 2025Hunted Labs raised a pre-seed roundInvestor Red Cell Partners$3mReportvia Security, Funded
March 2025Cloudsmith raised a Series B roundInvestor TCV$23mReportvia Security, Funded
February 2025HeroDevs acquired XeolFinds outdated open source code and dangers in the supply chainUndisclosedReportvia SecurityWeek
February 2025Eason Technology acquired Hongkong Starlux Intelligent TechnologyBlockchain technology company focused on blockchain security and applicationsUndisclosedReportvia SecurityWeek
January 2025Oligo Security raised a Series B roundInvestor Greenfield Partners$50mReportvia Security, Funded
January 2025Murphy Security raised a seed roundInvestors Hangzhou Fuzhuo Investment Management and Hundsun TechnologiesUndisclosedReportvia Security, Funded
January 2025Veracode acquired PhylumSoftware supply chain security firm analysing malicious packagesUndisclosedReportvia SecurityWeek
December 2024Sonar acquired TideliftSoftware supply chain security for managing open source software riskUndisclosedReportvia SecurityWeek
October 2024Socket raised a Series B roundInvestor Abstract Ventures$40mReportvia Security, Funded
October 2024EdgeBit raised a seed roundInvestor Haystack$3.1mReportvia Security, Funded
September 2024RunSafe Security raised a Series B roundGenerates SBOMs for embedded code and hardens vehicle ECU software against memory-based exploits at runtime.Investors Critical Ventures and SineWave Ventures$12mReportvia Security, Funded
August 2024Lineaje raised a Series A roundInvestors Prosperity7 Ventures, Neotribe, Hitachi Ventures and Tenable Ventures$20mReportvia Security, Funded
August 2024FOSSA acquired StackShareCommunity and enterprise platform for tracking and discussing developer toolsUndisclosedReportvia SecurityWeek
August 2024Exiger acquired XSBProvides a logistics intelligence platformUndisclosedReportvia SecurityWeek
July 2024Chainguard raised a Series C roundChainguard builds hardened, verified open source container images, libraries and packages to reduce vulnerabilities.Investors Redpoint Ventures, Lightspeed Venture Partners and IVP$140mReportvia Security, Funded
July 2024Exiger acquired aDolus TechnologyShows risks in software supply chains by listing parts and checking filesUndisclosedReportvia SecurityWeek
June 2024GoPlus Security raised fundingInvestors Animoca Brands, Fenbushi Capital and HashKey Capital$10mReportvia Security, Funded
June 2024Finite State acquired MergeBaseCanadian provider of supply chain security solutions and deep source code analysisUndisclosedReportvia SecurityWeek
May 2024RunSafe Security raised fundingGenerates SBOMs for embedded code and hardens vehicle ECU software against memory-based exploits at runtime.$9.7mReportvia Security, Funded
May 2024StepSecurity raised a seed roundInvestor Runtime Ventures$3mReportvia Security, Funded

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.