cybersecdirectory

SCA acquisitions and funding

24 acquisitions of software supply chain security vendors since 2020 and 78 funding rounds since 2022 on record. The most active buyers are Exiger (3) and Socket (2). See the software supply chain security vendors in the directory.

4acquisitions
14funding rounds
$999.5mraised in the 12 rounds with a disclosed size
Browse other categories

Showing 1 to 18 of 18

DateDealAmountSource
November 2025CodeNotary raised funding$16.5mReportvia Security, Funded
October 2025Chainguard raised debt fundingChainguard builds hardened, verified open source container images, libraries and packages to reduce vulnerabilities.Investor General Catalyst$280mReportvia Security, Funded
July 2025HeroDevs raised private equity fundingInvestor PSG Equity$125mReportvia Security, Funded
June 2025zeroRISC raised a seed roundInvestor Fontinalis Partners$10mReportvia Security, Funded
June 2025ONEKEY raised a Series B roundONEKEY provides a platform for product cybersecurity and compliance, automating SBOM analysis, vulnerability detection, and regulatory compliance.Investor YZi LabsUndisclosedReportvia Security, Funded
May 2025Ox Security raised a Series B roundInvestor DTCP$60mReportvia Security, Funded
May 2025Minimus raised a seed roundInvestors YL Ventures and Mayfield Fund$51mReportvia Security, Funded
April 2025Manifest raised a Series A roundSBOM and vulnerability management platform that helps carmakers and suppliers track risk in vehicle software.Investor Ensemble VC$15mReportvia Security, Funded
April 2025Chainguard raised a Series D roundChainguard builds hardened, verified open source container images, libraries and packages to reduce vulnerabilities.Investors IVP and Kleiner Perkins$356mReportvia Security, Funded
April 2025NetRise raised a Series A roundNetRise analyses compiled software to create an inventory of components and identify supply chain risks.Investor DNX Ventures$10mReportvia Security, Funded
April 2025Socket acquired CoanaBuilds static analysis and reachability engine for software composition analysisUndisclosedReportvia SecurityWeek
March 2025Hunted Labs raised a pre-seed roundInvestor Red Cell Partners$3mReportvia Security, Funded
March 2025Cloudsmith raised a Series B roundInvestor TCV$23mReportvia Security, Funded
February 2025HeroDevs acquired XeolFinds outdated open source code and dangers in the supply chainUndisclosedReportvia SecurityWeek
February 2025Eason Technology acquired Hongkong Starlux Intelligent TechnologyBlockchain technology company focused on blockchain security and applicationsUndisclosedReportvia SecurityWeek
January 2025Oligo Security raised a Series B roundInvestor Greenfield Partners$50mReportvia Security, Funded
January 2025Murphy Security raised a seed roundInvestors Hangzhou Fuzhuo Investment Management and Hundsun TechnologiesUndisclosedReportvia Security, Funded
January 2025Veracode acquired PhylumSoftware supply chain security firm analysing malicious packagesUndisclosedReportvia SecurityWeek

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.