cybersecdirectory

Vulnerability management acquisitions and funding

29 acquisitions of vulnerability management vendors since 2020 and 67 funding rounds since 2022 on record. The most active buyers are Tenable (2) and HelpSystems (2). See the vulnerability management vendors in the directory.

29acquisitions
$330mpaid in the 3 acquisitions with a disclosed price
Browse other categories

Showing 1 to 29 of 29

DateDealAmountSource
October 2026Hex-Rays acquired HexAIAI agents analyse source code and binaries to find vulnerabilities, malware and backdoorsUndisclosedReportvia SecurityWeek
October 2026Cohere acquired AISLEAISLE provides AI-native vulnerability management that finds, fixes, and verifies software vulnerabilities.UndisclosedReportvia SecurityWeek
19 Aug 2026Brinqa acquired PlexTracPlexTrac provides a platform for penetration test reporting, vulnerability management, and remediation orchestration.UndisclosedReportvia SecurityWeek
June 2026Aikido acquired RootAutomated patching and remediation of open source vulnerabilitiesUndisclosedReportvia SecurityWeek
October 2025Pentera acquired DevOceanSpecialises in remediation management for security findings$30mReportvia SecurityWeek
June 2025Magnet Forensics acquired Dark Circuit LabsWorks on finding weaknesses and building ways to use themUndisclosedReportvia SecurityWeek
June 2025Liongard acquired DarklightAI-powered vulnerability prioritisation platform for proactive cybersecurityUndisclosedReportvia SecurityWeek
May 2025Check Point acquired VeritiThreat exposure and mitigation platform with cross-vendor virtual patchingUndisclosedReportvia SecurityWeek
February 2025AttackIQ acquired DeepSurfaceSecurity posture management and vulnerability prioritisationUndisclosedReportvia SecurityWeek
January 2025Tenable acquired Vulcan CyberExposure management company helping consolidate and prioritise security risks$150mReportvia SecurityWeek
January 2025Cymulate acquired CYNC SecureUndisclosedReportvia SecurityWeek
September 2024Absolute Security acquired SyxsenseAutomated endpoint and vulnerability management, patching and remediationUndisclosedReportvia SecurityWeek
April 2024Veracode acquired Longbow SecurityFinds the underlying cause of major flaws without manual effortUndisclosedReportvia SecurityWeek
April 2024PDQ acquired CODAProvides next generation cybersecurity solutions including vulnerability scanning and managementUndisclosedReportvia SecurityWeek
April 2024Armis acquired Silk SecurityPrioritises and remediates cyber risk for organisations$150mReportvia SecurityWeek
March 2023Rocket Software acquired Key ResourcesCompany focusing on securing large computers and finding their weaknessesUndisclosedReportvia SecurityWeek
January 2023Lansweeper acquired RankedRightPairs weakness records with details of an organisation's hardwareUndisclosedReportvia SecurityWeek
October 2022Smartfin acquired Hex-RaysBelgian company behind the IDA Pro software disassemblerUndisclosedReportvia SecurityWeek
October 2022OPSWAT acquired FileScan.IOGerman malware assessment platform with a free malware analysis serviceUndisclosedReportvia SecurityWeek
July 2022Vitruvian Partners acquired Outpost24Exposure management platform with vulnerability management, external attack surface management, application security testing, pen testing as a service and digital risk protection.UndisclosedReportvia SecurityWeek
June 2022Framatome acquired CyberwatchFinds weaknesses in systems and keeps firms within the rulesUndisclosedReportvia SecurityWeek
February 2022Tenable acquired CymptomAttack path management to add context and prioritisationUndisclosedReportvia SecurityWeek
January 2022Flashpoint acquired Risk Based SecurityCompany studying weak points and stolen data leaksUndisclosedReportvia SecurityWeek
August 2021Ivanti acquired RiskSenseOffers vulnerability management and risk-based prioritisation softwareUndisclosedReportvia SecurityWeek
June 2021Synopsys acquired Code DxSpecialises in application vulnerability management and risk reportingUndisclosedReportvia SecurityWeek
May 2021HelpSystems acquired Beyond SecurityProvides vulnerability assessment and compliance solutionsUndisclosedReportvia SecurityWeek
May 2021Cisco acquired Kenna SecurityA digital defence firm working on tools that track system weaknessesUndisclosedReportvia SecurityWeek
February 2021HelpSystems acquired Digital DefenseIt offers ways to judge dangers and handle weak points in systemsUndisclosedReportvia SecurityWeek
January 2021WebARX acquired ThreatPressWordPress security company running a free vulnerability databaseUndisclosedReportvia SecurityWeek

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Each Report link goes to the announcement or story the source cites, and the via link to the round-up or newsletter issue. Amounts are in US dollars. The category is what the bought or funded company sells.