# The Cybersecurity M&A Landscape in August 2026: A Month of Strategic Acquisitions and Major Deals
The cybersecurity industry continues to witness an extraordinary wave of consolidation as organizations race to acquire cutting-edge technologies, expand their service offerings, and strengthen their competitive positions. August 2026 saw thirty-three cybersecurity-related merger and acquisition deals announced, marking another robust month in what has become a record year for deal activity across the sector.
From AI-powered defense platforms to identity verification startups and cyber insurance innovators, the acquisitions announced this month reveal several key trends shaping the future of cybersecurity. Below is a detailed look at some of the most significant transactions and what they mean for the industry.
—
## Major Cybersecurity M&A Deals of August 2026
### Brinqa Acquires PlexTrac
Continuous Threat Exposure Management (CTEM) leader Brinqa has acquired PlexTrac, a vendor specializing in penetration testing workflows and reporting. By integrating PlexTrac’s offensive security validation capabilities directly into its CTEM platform, Brinqa aims to create a more comprehensive solution that not only identifies vulnerabilities but also verifies that remediation efforts are effective. This combination of continuous threat exposure management with offensive security testing represents a growing trend toward holistic vulnerability management ecosystems.
### Cribl Acquires Radiant Security
Cribl has secured the technology assets and intellectual property of San Francisco-based Radiant Security, an AI-native Security Operations Center (SOC) startup. The acquisition will allow Cribl to weave Radiant’s autonomous alert triage and incident response capabilities directly into its telemetry data platform. As organizations struggle with alert fatigue and the growing complexity of security operations, the integration of AI-driven automation into data platforms is becoming an essential differentiator.
### Datavault AI to Acquire CyberCatch for $94.5 Million
Data monetization, credentialing, digital engagement, and Real World Asset (RWA) tokenization solutions provider Datavault AI has entered into a definitive all-cash agreement to acquire San Diego-based CyberCatch for $94.5 million. The deal brings together CyberCatch’s continuous compliance platform and post-quantum encryption technology with Datavault AI’s expanding portfolio. This acquisition signals a growing urgency among organizations to prepare for the cryptographic challenges posed by the advent of quantum computing.
### Deel Acquires Clarity for an Estimated $40–50 Million
Deel, a global workforce platform, has acquired Israel-based Clarity, an AI cybersecurity company specializing in deepfake detection and identity verification. The deal, reportedly valued between $40 million and $50 million, will allow Deel to integrate Clarity’s technology into its hiring workflows. As remote workforce hiring becomes increasingly prevalent, the ability to detect deepfakes and prevent identity fraud during the recruitment process is becoming a critical security priority.
### Echo Acquires Minimus
Echo has acquired the technology assets and enterprise customer contracts of Tel Aviv-based Minimus, a hardened container image provider. The all-cash deal followed Minimus’s operational wind-down and is estimated at a few million dollars. Through the acquisition, Echo stands to broaden its distribution support, expand integration capabilities, and strengthen the proprietary agents that power its software factory — reinforcing its position in the container security space.
### Fortinet Acquires Virtue AI
Fortinet has announced the acquisition of Virtue AI, an AI security company. The deal is expected to significantly enhance Fortinet’s AI security capabilities across models, applications, and agentic systems. By leveraging Virtue AI’s agentic system red teaming, agent protection and governance, continuous AI validation, and real-time guardrail capabilities, Fortinet aims to provide customers with more robust protections for AI-driven workloads and deployments.
### Kiteworks Acquires WAMNET to Enter Japan
Kiteworks has acquired WAMNET Japan K.K., a secure data transfer and file-sharing provider based in Japan. This marks Kiteworks’ seventh acquisition in less than five years and represents the company’s expansion into the Japanese market. The deal aligns with Kiteworks’ private content network (PCN) strategy, which unifies file sharing, managed file transfer, email, APIs, and web forms under a single governed platform. Notably, WAMNET’s existing contracts, pricing, and support structures will remain in place, and customer data will continue to be hosted in Japan.
### Munich Re Acquires At-Bay for $575 Million
German reinsurance giant Munich Re has agreed to acquire California-based cyber insurtech At-Bay for $575 million. At-Bay will become part of Munich Re’s HSB unit, combining continuous risk mitigation and Managed Detection and Response (MDR) services with Munich Re’s global insurance coverage. This acquisition underscores the growing convergence between cybersecurity and insurance, as insurers increasingly seek to offer integrated risk management and security services alongside traditional coverage.
### Palo Alto Networks Acquires Console
Palo Alto Networks has acquired Console, an AI-native platform designed to help organizations build agentic workflows and automate operational tasks using natural language. The acquisition is intended to deepen the agentic capabilities of Palo Alto Networks’ Cortex platform, enabling security teams to investigate signals, prioritize work, and automatically take action across enterprise environments with minimal manual intervention.
### Visa to Acquire BioCatch for $2.4 Billion
In the largest deal of the month, Visa is purchasing fraud prevention company BioCatch for $2.4 billion in cash. The acquisition reflects Visa’s ambition to expand its cybersecurity and financial crime detection capabilities. By adding BioCatch’s behavioral and device intelligence to its existing portfolio of cyber, fraud, risk, and security products, Visa aims to create a more comprehensive defense against sophisticated financial fraud.
—
## Other Notable Cybersecurity M&A Deals in August 2026
Beyond the headline transactions, the month also saw numerous additional deals across various segments of the cybersecurity industry:
– Ampcus acquires SmarterD
– Anaconda acquires Enkrypt
– Athena Agentic acquires Maxxsure and Omni Cyber Solutions
– AXA XL to acquire S-RM
– BlueAlly acquires GigaNetworks
– Bridgepoint acquires a majority stake in Lansweeper
– Cycurion acquires Kustom Entertainment
– ePlus acquires Daymark
– Guardsix acquires Logmanager
– H.I.G. Capital sells ECI to Wind Point Partners
– Image Solutions acquires Romeo Computer Company
– Integrity360 acquires CyberIAM
– LG Uplus acquires Pago Networks
– Logicalis US acquires Loial
– NetApp acquires JetStream Software
– New Charter acquires CyberTrust IT Solutions
– Nexus IT acquires Loyal IT
– Privacy Bee acquires EraseMe.app
– Redsquid acquires ARK ICT
– SEPPmail acquires CyberPilot
– Systematic Growth acquires 4Secure
– Terma to acquire Dencrypt A/S
– Universal Digital Inc. to acquire PQCEE
These deals span a wide range of cybersecurity disciplines, including network security, identity and access management, compliance, secure file transfer, and endpoint protection, highlighting the breadth of investment activity across the sector.
—
## Key Trends Driving the August 2026 M&A Activity
Several notable trends emerge from the acquisitions announced this month:
**1. AI-Driven Security Is at the Forefront.** A significant portion of the deals involve companies leveraging artificial intelligence for threat detection, incident response, identity verification, and deepfake detection. Both established vendors and startups are racing to integrate AI capabilities into their platforms.
**2. Consolidation Around Platform Plays.** Larger cybersecurity companies are acquiring niche vendors to build comprehensive platforms that span multiple security functions — from CTEM and penetration testing to SOC automation and AI security.
**3. The Convergence of Cybersecurity and Insurance.** Munich Re’s acquisition of At-Bay highlights a growing trend where insurance companies are directly investing in cybersecurity services to better understand, mitigate, and price risk.
**4. Post-Quantum Readiness.** Datavault AI’s acquisition of CyberCatch reflects a rising urgency around post-quantum encryption and compliance, as organizations prepare for the eventual impact of quantum computing on current cryptographic standards.
**5. Geographic Expansion.** Kiteworks’ acquisition of WAMNET illustrates how cybersecurity companies are expanding their footprint into new international markets through strategic acquisitions.
—
## FAQ: Cybersecurity M&A Activity in August 2026
**Q: How many cybersecurity M&A deals were announced in August 2026?**
A: Thirty-three cybersecurity-related merger and acquisition deals were announced during the month.
**Q: What was the largest cybersecurity acquisition announced in August 2026?**
A: Visa’s planned acquisition of BioCatch for $2.4 billion in cash was the largest deal announced during the month.
**Q: Which companies are acquiring AI-powered cybersecurity startups?**
A: Multiple companies are acquiring AI-focused cybersecurity vendors, including Cribl (Radiant Security), Fortinet (Virtue AI), Deel (Clarity), and Palo Alto Networks (Console).
**Q: What is driving the surge in cybersecurity M&A activity?**
A: Key drivers include the growing complexity of cyber threats, the need for AI-powered security capabilities, geographic expansion goals, the convergence of cybersecurity with insurance, and the urgency around post-quantum encryption readiness.
**Q: Are only large enterprises participating in these acquisitions?**
A: No. The deals involve a mix of large enterprises such as Visa, Fortinet, and Munich Re, as well as mid-sized cybersecurity firms and private equity-backed buyers like Bridgepoint and H.I.G. Capital.
**Q: What role does geographic expansion play in these deals?**
A: Several acquisitions are motivated by a desire to enter new regional markets. For example, Kiteworks’ acquisition of WAMNET Japan represents its entry into the Japanese market.
**Q: Why are established cybersecurity companies acquiring startups?**
A: Established companies are acquiring startups to gain access to innovative technologies, accelerate product development, integrate new capabilities into existing platforms, and strengthen their competitive positioning in a rapidly evolving market.
**Q: What is the significance of post-quantum encryption in the M&A landscape?**
A: With quantum computing advancing rapidly, organizations are increasingly seeking vendors that offer post-quantum encryption and compliance solutions. This has made such capabilities an attractive acquisition target for companies looking to future-proof their offerings.
—
## Conclusion
The cybersecurity M&A landscape in August 2026 reflects a market in the midst of rapid transformation. Artificial intelligence, platform consolidation, geographic expansion, and the convergence of cybersecurity with adjacent industries such as insurance are all shaping the deals being announced. For organizations across the cybersecurity ecosystem, these acquisitions represent not just financial transactions but strategic moves to stay ahead of an increasingly sophisticated threat landscape. As the year progresses, it will be worth watching which of these deals deliver the promised integrations and which new trends emerge from the resulting combinations of technologies and talent.
The pace of activity also signals confidence in the cybersecurity market despite ongoing challenges such as talent shortages, evolving threat vectors, and regulatory complexity. Companies that invest strategically in acquiring the right capabilities are positioning themselves to deliver more comprehensive and effective security solutions to their customers.
Thank you for reading.
