SCA acquisitions and funding
24 acquisitions of software supply chain security vendors since 2020 and 78 funding rounds since 2022 on record. The most active buyers are Exiger (3) and Socket (2). See the software supply chain security vendors in the directory.
Browse other categories
- Managed security services 466
- GRC and compliance automation 230
- AI and LLM security 217
- Security consulting and vCISO 213
- Fraud and payment fraud prevention 165
- Application security testing 162
- Identity and access management 159
- Encryption and key management 156
- Threat intelligence 148
- Security awareness and human risk 138
Deals
Showing 1 to 6 of 6
| Date | Deal | Amount | Source |
|---|---|---|---|
| December 2024 | Sonar acquired TideliftSoftware supply chain security for managing open source software risk | Undisclosed | Report on Sonar buying Tidelift, December 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| August 2024 | FOSSA acquired StackShareCommunity and enterprise platform for tracking and discussing developer tools | Undisclosed | Report on FOSSA buying StackShare, August 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| August 2024 | Exiger acquired XSBProvides a logistics intelligence platform | Undisclosed | Report on Exiger buying XSB, August 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| July 2024 | Exiger acquired aDolus TechnologyShows risks in software supply chains by listing parts and checking files | Undisclosed | Report on Exiger buying aDolus Technology, July 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| June 2024 | Finite State acquired MergeBaseCanadian provider of supply chain security solutions and deep source code analysis | Undisclosed | Report on Finite State buying MergeBase, June 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
| February 2024 | VeriBOM acquired CloudChompSoftware supply chain management and open source security compliance | Undisclosed | Report on VeriBOM buying CloudChomp, February 2024 (opens in a new tab)via SecurityWeek (opens in a new tab) |
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.