cybersecdirectory

SCA acquisitions and funding

24 acquisitions of software supply chain security vendors since 2020 and 78 funding rounds since 2022 on record. The most active buyers are Exiger (3) and Socket (2). See the software supply chain security vendors in the directory.

24acquisitions
$195mpaid in the 1 acquisition with a disclosed price
Browse other categories

Showing 1 to 24 of 24

DateDealAmountSource
September 2026Dragos acquired NetRiseNetRise analyses compiled software to create an inventory of components and identify supply chain risks.UndisclosedReportvia SecurityWeek
July 2026Webacy acquired Trugard LabsSmart contract risk analytics for crypto, including address poisoning detectionUndisclosedReportvia SecurityWeek
June 2026Accenture acquired NetRiseNetRise analyses compiled software to create an inventory of components and identify supply chain risks.UndisclosedReportvia SecurityWeek
April 2026Socket acquired Secure AnnexKeeps browser, coding tool and AI add-on extensions safeUndisclosedReportvia SecurityWeek
April 2025Socket acquired CoanaBuilds static analysis and reachability engine for software composition analysisUndisclosedReportvia SecurityWeek
February 2025HeroDevs acquired XeolFinds outdated open source code and dangers in the supply chainUndisclosedReportvia SecurityWeek
February 2025Eason Technology acquired Hongkong Starlux Intelligent TechnologyBlockchain technology company focused on blockchain security and applicationsUndisclosedReportvia SecurityWeek
January 2025Veracode acquired PhylumSoftware supply chain security firm analysing malicious packagesUndisclosedReportvia SecurityWeek
December 2024Sonar acquired TideliftSoftware supply chain security for managing open source software riskUndisclosedReportvia SecurityWeek
August 2024FOSSA acquired StackShareCommunity and enterprise platform for tracking and discussing developer toolsUndisclosedReportvia SecurityWeek
August 2024Exiger acquired XSBProvides a logistics intelligence platformUndisclosedReportvia SecurityWeek
July 2024Exiger acquired aDolus TechnologyShows risks in software supply chains by listing parts and checking filesUndisclosedReportvia SecurityWeek
June 2024Finite State acquired MergeBaseCanadian provider of supply chain security solutions and deep source code analysisUndisclosedReportvia SecurityWeek
February 2024VeriBOM acquired CloudChompSoftware supply chain management and open source security complianceUndisclosedReportvia SecurityWeek
November 2023Vertu Capital acquired ActiveState SoftwareSecure open source integration platform for enterprise software developersUndisclosedReportvia SecurityWeek
May 2023Exiger acquired Ion ChannelCompany dealing with dangers arising from bought-in programming componentsUndisclosedReportvia SecurityWeek
February 2023Zscaler acquired Canonic SecurityIsraeli startup working on software supply chain securityUndisclosedReportvia SecurityWeek
November 2022Palo Alto Networks acquired Cider SecurityIsraeli startup offering software supply chain security capabilities$195mReportvia SecurityWeek
September 2022Materialise acquired Identify3DMakes tools that lock, ship and track components through factory chainsUndisclosedReportvia SecurityWeek
March 2022CyberRes acquired DebrickedAssists firms in keeping their software supply chain safeUndisclosedReportvia SecurityWeek
August 2021Checkmarx acquired DusticoBuilds tools that spot tampered code packages in supply chainsUndisclosedReportvia SecurityWeek
May 2021Snyk acquired FossIDSoftware composition analysis tool for open source codeUndisclosedReportvia Wikipedia
April 2021WhiteSource acquired DiffendSupplies a threat detection tool built on open sourceUndisclosedReportvia SecurityWeek
May 2020Venafi acquired JetstackCloud-native infrastructure company for KubernetesUndisclosedReportvia Cybersecurity Ventures

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.