Twenty-one cybersecurity-related merger and acquisition (M&A) deals were announced in July 2026.
For a detailed view of the more than 420 acquisitions announced in 2025, check out SecurityWeek’s annual M&A report.
Here are some of the most important cybersecurity M&A deals announced in July 2026:
Bank of America to acquire MDSec
Bank of America announced plans to acquire UK-based information security consultancy MDSec Consulting Limited. MDSec provides technical information security consulting services and employs roughly 65 cybersecurity professionals. The acquisition will expand Bank of America’s presence in northern England.
Barracuda acquires Evo Security
Barracuda Networks has acquired Texas-based Evo Security for an undisclosed amount. The deal expands Barracuda’s BarracudaONE platform by integrating multi-tenant identity, IAM, and PAM capabilities for MSP partners.
Cribl acquires CardinalOps
San Francisco-based Cribl acquired Israeli AI detection engineering startup CardinalOps. The acquisition brings automated detection engineering to Cribl’s AI platform to improve threat coverage and lower log management costs for enterprise SOCs. Cribl is establishing a new office in Tel Aviv following the acquisition.
CrowdStrike to acquire XM Cyber IP
Cybersecurity titan CrowdStrike is buying the patents and source code of Israel’s XM Cyber from Schwarz Group for an undisclosed amount. The transaction allows CrowdStrike to integrate exposure management and attack-path analysis directly into its offerings. It’s unclear how much CrowdStrike has paid for the XM Cyber IP, but Schwarz Group acquired XM Cyber in 2021 for $700 million.
Cyera to acquire Oasis Security
California/Israel-based Cyera has agreed to acquire Israeli startup Oasis Security in a transaction valued at around $1 billion. The move unifies Cyera’s data security platform with Oasis’s non-human identity governance to protect enterprise AI agents and service accounts.
Infoblox to acquire Kentik
Infoblox has entered into a definitive agreement to purchase network intelligence and observability platform Kentik for an undisclosed amount. The integration blends Infoblox’s DNS/network context with Kentik’s real-time network traffic visibility to strengthen hybrid cloud cyber resilience.
Okta to acquire Permiso Security
Okta signed an agreement to acquire Palo Alto-based Permiso Security, reportedly for roughly $200 million. The acquisition equips Okta with continuous identity threat detection (ITDR) capabilities to protect human, machine, and autonomous AI identities across cloud environments.
Palo Alto Networks to acquire Embrace
Palo Alto Networks plans to acquire user-focused mobile and web observability platform Embrace. Palo Alto Networks will integrate Embrace’s mobile observability and real-time user telemetry into its platform to unify mobile experience monitoring and threat visibility.
Qualcomm acquires SAM Seamless Network
Qualcomm acquired Israeli IoT cybersecurity startup SAM Seamless Network, reportedly for over $100 million. The deal embeds SAM’s network security software into Qualcomm’s wireless chipsets and gateways to safeguard communication networks. SAM customers include US telecom giants AT&T and Verizon.
Other cybersecurity M&A deals announced in July 2026:
CompassMSP acquires The Logic Group
CyberNut acquires Neptune Navigate
Databarracks acquires Acumen
DataExpert Group acquires ADO Security
Katalyst acquires Layer27
Keyfactor to acquire Cofide
NINJIO acquires SafeStack
TAC InfoSec to acquire Safehouse Technologies
The 20 acquires Sundance Networks
Veridas acquires Fourthline
Viatel Technology Group acquires FullProxy
Webacy acquires Trugard Labs
Related: Cybersecurity M&A Roundup: 37 Deals Announced in June 2026
