cybersecdirectory

TPRM acquisitions and funding

23 acquisitions of third-party risk management vendors since 2020 and 37 funding rounds since 2022 on record. The most active buyer is Bitsight (2). See the third-party risk management vendors in the directory.

23acquisitions
$350mpaid in the 1 acquisition with a disclosed price
Browse other categories

Showing 1 to 23 of 23

DateDealAmountSource
April 2026Protecht acquired VISO TRUSTAI-powered third-party risk management platform for enterprisesUndisclosedReportvia SecurityWeek
January 2026Diligent acquired 3rdRiskProvides a third-party risk management platformUndisclosedReportvia SecurityWeek
November 2025Meditology Services acquired CORLUndisclosedReportvia SecurityWeek
October 2025Searchlight Cyber acquired IntangicRisk management company helping organisations measure and mitigate cyber riskUndisclosedReportvia SecurityWeek
July 2025Vanta acquired RiskeyProvides real-time monitoring of third and fourth party riskUndisclosedReportvia SecurityWeek
January 2025Cytracom acquired TelivyUndisclosedReportvia SecurityWeek
December 2024Schellman acquired Connor ConsultingThird-party risk management practiceUndisclosedReportvia SecurityWeek
September 2024Ncontracts acquired VenminderThird-party risk management software with outsourced vendor control assessments, continuous vendor risk monitoring and managed services, now part of Ncontracts.UndisclosedReportvia SecurityWeek
March 2024Zscaler acquired AvalorIsraeli startup providing a risk management platform using Data Fabric for Security$350mReportvia SecurityWeek
September 2023Apexanalytix acquired DarkbeamCyber risk management firm helping assess and manage cyber riskUndisclosedReportvia SecurityWeek
July 2023Safe Security acquired RiskLensProvides risk management services and softwareUndisclosedReportvia SecurityWeek
July 2023ProcessUnity acquired CyberGRXProvides third-party risk management solutionsUndisclosedReportvia SecurityWeek
July 2023EDGE Group acquired OryxLabsSells tools for handling danger and protecting computer networksUndisclosedReportvia SecurityWeek
February 2023Uptime Institute acquired Leet SecuritySpanish firm providing independent cybersecurity risk evaluation and ratingUndisclosedReportvia SecurityWeek
January 2023SailPoint acquired SecZettaHandles risk tied to outside workers and partner identitiesUndisclosedReportvia SecurityWeek
November 2022Veriforce acquired CHASSupplier of danger control and regulatory adherence offeringsUndisclosedReportvia SecurityWeek
August 2022Exiger acquired Supply DynamicsSupply chain collaboration platformUndisclosedReportvia SecurityWeek
August 2022Bitsight acquired ThirdPartyTrustProvides third party risk management solutionsUndisclosedReportvia SecurityWeek
November 2021Entreda acquired PrivvaSpecialises in enterprise risk managementUndisclosedReportvia SecurityWeek
October 2021Scanmarket acquired SymfactSoftware for managing contracts and supplier danger, using AI, aimed at lawyersUndisclosedReportvia SecurityWeek
October 2021BlueVoyant acquired 202 GroupProvides supply chain risk management solutions to government organisationsUndisclosedReportvia SecurityWeek
September 2021Bitsight acquired VisibleRiskCyber risk ratings venture assessing organisations' financial exposure to cyber riskUndisclosedReportvia SecurityWeek
May 2021OneTrust acquired Shared AssessmentsProvides third-party risk management and standardised assessment questionnairesUndisclosedReportvia SecurityWeek

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.