Cybersecurity M&A Roundup: 42 Deals Announced in May 2025

The number of cybersecurity-related merger and acquisition (M&A) announcements surged in May 2025, with 42 deals.

An analysis conducted by SecurityWeek shows that 405 cybersecurity-related mergers and acquisitions were announced in 2024. Check out the detailed report.     

Here is a list of the most important cybersecurity M&A deals announced in May 2025:

Check Point to acquire Veriti

Check Point has acquired Israel-based threat exposure and mitigation platform Verity, reportedly for over $100 million. Veriti’s capabilities, which include cross-vendor virtual patching and threat intelligence enforcement, will be integrated into the Check Point Infinity Platform as part of the Threat Exposure and Risk Management offering.

F5 acquires Fletch

Security and application delivery firm F5 announced buying Fletch, a San Francisco-based company that leverages agentic AI to help organizations detect threats. Fletch’s technology will be integrated into the F5 Application Delivery and Security Platform, providing customers with deeper insights, real-time threat intelligence, and proactive security recommendations.

Fortinet acquires Suridata

Fortinet has acquired Israel-based Suridata, reportedly for tens of millions of dollars. Suridata provides SaaS security solutions that will be added to Fortinet’s Unified SASE portfolio to enhance visibility, continuous monitoring, risk assessment, and policy enforcement. 

Jumpcloud acquires VaultOne

Identity, device, and access management solutions provider JumpCloud has acquired VaultOne for its privileged access management (PAM) solutions. VaultOne’s PAM technology will be integrated into JumpCloud’s platform.

Keyfactor acquires InfoSec Global and CipherInsights

PKI and machine identity management solutions provider Keyfactor has announced two acquisitions: cryptographic posture management firm InfoSec Global, and CipherInsights, a cryptographic discovery solution by Quantum Xchange. InfoSec Global and CipherInsights enable Keyfactor to enhance its ability to identify, prioritize and remediate cryptographic risks. 

Leidos acquires Kudu Dynamics

Defense technology firm Leidos has acquired Kudu Dynamics, which helps the US government with full spectrum cyber operations, for $300 million. Kudu Dynamics enables Leidos to enhance offensive cyber capabilities, electromagnetic spectrum operations, and vulnerability research.

Lookout sells cloud security business to Fortra

Mobile security firm Lookout has sold its cloud security business to offensive and defensive cyber solutions provider Fortra, which owns the widely used Cobalt Strike pentesting tool. Fortra will acquire all assets, intellectual property, and personnel associated with the Lookout business. Lookout said the divestiture reflects its strategic focus on mobile endpoint security.

Orca acquires Opus 

Cloud data security vendor Orca Security announced the acquisition of Opus Security, an Israeli startup that has developed technology for AI-powered cloud security orchestration and remediation.

Proofpoint acquires Hornetsecurity

Enterprise cybersecurity giant Proofpoint is acquiring Germany-based Hornetsecurity, a company specializing in Microsoft 365 security solutions, reportedly for $1 billion. Hornetsecurity provides Microsoft 365 security, email security, data protection, compliance, and security awareness solutions. Proofpoint said the acquisition enables it to boost human-centric security capabilities, particularly for SMBs.

Proofpoint acquires Nuclei

Proofpoint also announced the acquisition of Nuclei, a company specializing in compliance archiving and data enrichment for workplace communications. With this deal, Proofpoint further enhances its digital communications governance (DCG) offering with capabilities to capture, retain, and analyze communications across workspace collaboration platforms.

Tenable acquires Apex Security

Tenable has acquired Israeli company Apex Security, reportedly for $105 million. Apex Security specializes in securing the AI attack surface and its technology will enable Tenable to expand its capabilities for detecting and assessing AI usage, including for governing usage, enforcing policies, and controlling exposure. 

Zscaler acquires Red Canary

Zscaler plans to buy Denver-based managed detection and response (MDR) specialist Red Canary for $675 million. The deal adds technology for human monitoring and incident response on top of Zscaler’s zero trust cloud.    

Other cybersecurity M&A deals announced in April 2025:

Arqit acquires Ampliphae’s technology IP

BCI acquires Trustlink Technologies

Cognyte acquires GroupSense

CPX acquires SpiderSilk

CXO acquires CIOsynergy, secureCISO and CFO.org events

Cyber Solutions acquires CleverTech

CYBERR acquires CyberTee

Efex acquires Datcom

Ekco acquires Predatech

Ekinops acquires Olfeo

Etisalat acquires Help AG

Five Tattva acquires major stake in Zeroday Ops Private Limited

Fivetran to acquire Census

IGEL acquires Stratodesk

Intelligent Technical Solutions acquires Black Breach

Limerston Capital acquires CyberCrowd

Mercury acquires Star Lab

Netrio acquires Agio

Ory acquires BoxyHQ

PartnerOne acquires XYPRO

Qubika acquires Nitra Security

Scytale acquires AudITech

Sensiba acquires AssuranceLab

SeSa acquires majority stake of Delta Tecnologías de Información SL

SurgeONE.ai acquires MGL Consulting

Tyto Athene acquires StackArmor

Vipre Security acquires Forensic and Compliance Systems

VTG acquires Byte Systems and Tunuva Technologies

Related: Cybersecurity M&A Roundup: 23 Deals Announced in March 2025

Related: Cybersecurity M&A Roundup: 31 Deals Announced in April 2025