Forty cybersecurity merger and acquisition (M&A) deals were announced in September 2025.
An analysis conducted by SecurityWeek shows that 405 cybersecurity-related mergers and acquisitions were announced in 2024. Check out the detailed report.
Here is a list of the most important cybersecurity M&A deals announced in September 2025:
Accenture acquires IAMConcepts
Professional services giant Accenture has acquired Canada-based IAMConcepts, a company that specializes in identity and access management (IAM) solutions. The deal will enhance Accenture’s ability to deliver IAM solutions in Canada. Over the past decade, Accenture has acquired 22 cybersecurity companies.
Cato Networks acquires Aim Security
Secure access service edge (SASE) firm Cato Networks has acquired AI security company Aim Security. This is Cato’s first-ever acquisition and it will allow the company to expand its SASE Cloud Platform to enable enterprises to securely adopt AI agents and applications. Financial terms of the deal were not officially disclosed, but Calcalist reported that Cato paid an estimated $300-350 million in cash and shares for Aim.
Check Point to acquire Lakera
Check Point Software Technologies announced plans to acquire Lakera, a company specializing in security for agentic AI applications. The addition of Lakera technology will enable Check Point to extend its AI security capabilities. Lakera will also form the basis of Check Point’s new Global Center of Excellence for AI Security. Financial details were not officially disclosed, but Check Point has reportedly agreed to pay an estimated $300 million for Lakera.
CrowdStrike to acquire Pangea
CrowdStrike announced plans to buy AI security firm Pangea to expand its Falcon platform with new protections designed for enterprise AI systems. CrowdStrike will integrate Pangea’s capabilities to help organizations monitor, control, and secure AI interactions. The cybersecurity giant is reportedly paying roughly $260 million for Pangea.
DigiCert acquires Valimail
PKI, TLS certificate, and digital security solutions provider DigiCert has acquired zero trust email authentication company Valimail. Valimail’s DMARC technology will enhance the capabilities of the DigiCert ONE platform.
F5 to acquire CalypsoAI
F5 is acquiring AI security firm CalypsoAI for $180 million. CalypsoAI has developed a platform designed to use agentic red teaming, real-time defenses, and automated security enforcement to secure AI at inference. F5 will integrate Capypso AI technology into its Application Delivery and Security Platform (ADSP).
Mitsubishi Electric to acquire Nozomi Networks
Mitsubishi Electric has signed an agreement to acquire OT and IoT cybersecurity company Nozomi Networks in a deal that values the company at nearly $1 billion. Mitsubishi Electric will acquire the Nozomi Networks shares it does not already own for $883 million in cash. Nozomi Networks will continue to operate independently.
SecurityScorecard acquires HyperComply
SecurityScorecard announced the acquisition of HyperComply, an AI-powered platform for security questionnaire automation and compliance management. The acquisition combines SecurityScorecard’s security ratings and continuous third- and fourth-party risk visibility with HyperComply’s intelligent automation.
SentinelOne acquires Observo AI
SentinelOne announced plans to buy Observo AI, a data pipeline platform for DevOps and security. Observo AI’s platform is designed to help enterprises manage the significant amount of data generated by IT infrastructure and security tools. SentinelOne said Observo AI will enable it to boost its SIEM and data offerings.
Varonis acquires SlashNext
Varonis Systems announced the acquisition of email security provider SlashNext for $150 million. SlashNext leverages predictive AI models to protect users from advanced spearphishing and social engineering attacks via email and collaboration apps. SlashNext will enable Varonis to enhance the capabilities of its Managed Data Detection and Response (MDDR) service.
Other cybersecurity M&A deals announced in September 2025:
31 Concept acquires Xynthor AI
360 Advanced acquires Security Compliance Associates
Aikido Security acquires Allseek and Haicker
American Systems acquires Epsilon
Axiom GRC acquires The DPO Centre
BID Equity acquires TinyMDM
CloserStill Media acquires Billington CyberSecurity
CompassMSP acquires Simplegrid
Com Laude to acquire Markmonitor
Cyberbit acquires RangeForce
EbankIT acquires SecuritySide
EchoStor acquires CyberNorth
Fairdinkum Consulting acquires Tech 2020 Solutions
Fortified Health Security acquires Latitude
Hack the Box acquires LetsDefend
Halon acquires Eleven
Harness acquires Qwiet AI
IDtech acquires OwnID
Scope Technologies acquires Plurilock Security (Cloud Codes)
SDG Corporation acquires Hub City Media
Seclab acquires Seckiot
Spectrotel acquires Mosaic NetworX
Spreedly acquired Dodgeball
Sunstone Partners acquires majority stake in Clearwater
Tego acquires VigilAigent
Thrive acquires VitalCORE
UltraViolet Cyber acquires Black Duck’s Application Security Testing Services
Unico acquires OwnID
Wysetek Systems acquires Scalezee Technologies
Related: Cybersecurity M&A Roundup: 27 Deals Announced in August 2025
Related: Cybersecurity M&A Roundup: 44 Deals Announced in July 2025
