The number of cybersecurity-related merger and acquisition (M&A) announcements surged in May 2025, with 42 deals.
An analysis conducted by SecurityWeek shows that 405 cybersecurity-related mergers and acquisitions were announced in 2024. Check out the detailed report.
Here is a list of the most important cybersecurity M&A deals announced in May 2025:
Check Point to acquire Veriti
Check Point has acquired Israel-based threat exposure and mitigation platform Verity, reportedly for over $100 million. Veriti’s capabilities, which include cross-vendor virtual patching and threat intelligence enforcement, will be integrated into the Check Point Infinity Platform as part of the Threat Exposure and Risk Management offering.
F5 acquires Fletch
Security and application delivery firm F5 announced buying Fletch, a San Francisco-based company that leverages agentic AI to help organizations detect threats. Fletch’s technology will be integrated into the F5 Application Delivery and Security Platform, providing customers with deeper insights, real-time threat intelligence, and proactive security recommendations.
Fortinet acquires Suridata
Fortinet has acquired Israel-based Suridata, reportedly for tens of millions of dollars. Suridata provides SaaS security solutions that will be added to Fortinet’s Unified SASE portfolio to enhance visibility, continuous monitoring, risk assessment, and policy enforcement.
Jumpcloud acquires VaultOne
Identity, device, and access management solutions provider JumpCloud has acquired VaultOne for its privileged access management (PAM) solutions. VaultOne’s PAM technology will be integrated into JumpCloud’s platform.
Keyfactor acquires InfoSec Global and CipherInsights
PKI and machine identity management solutions provider Keyfactor has announced two acquisitions: cryptographic posture management firm InfoSec Global, and CipherInsights, a cryptographic discovery solution by Quantum Xchange. InfoSec Global and CipherInsights enable Keyfactor to enhance its ability to identify, prioritize and remediate cryptographic risks.
Leidos acquires Kudu Dynamics
Defense technology firm Leidos has acquired Kudu Dynamics, which helps the US government with full spectrum cyber operations, for $300 million. Kudu Dynamics enables Leidos to enhance offensive cyber capabilities, electromagnetic spectrum operations, and vulnerability research.
Lookout sells cloud security business to Fortra
Mobile security firm Lookout has sold its cloud security business to offensive and defensive cyber solutions provider Fortra, which owns the widely used Cobalt Strike pentesting tool. Fortra will acquire all assets, intellectual property, and personnel associated with the Lookout business. Lookout said the divestiture reflects its strategic focus on mobile endpoint security.
Orca acquires Opus
Cloud data security vendor Orca Security announced the acquisition of Opus Security, an Israeli startup that has developed technology for AI-powered cloud security orchestration and remediation.
Proofpoint acquires Hornetsecurity
Enterprise cybersecurity giant Proofpoint is acquiring Germany-based Hornetsecurity, a company specializing in Microsoft 365 security solutions, reportedly for $1 billion. Hornetsecurity provides Microsoft 365 security, email security, data protection, compliance, and security awareness solutions. Proofpoint said the acquisition enables it to boost human-centric security capabilities, particularly for SMBs.
Proofpoint acquires Nuclei
Proofpoint also announced the acquisition of Nuclei, a company specializing in compliance archiving and data enrichment for workplace communications. With this deal, Proofpoint further enhances its digital communications governance (DCG) offering with capabilities to capture, retain, and analyze communications across workspace collaboration platforms.
Tenable acquires Apex Security
Tenable has acquired Israeli company Apex Security, reportedly for $105 million. Apex Security specializes in securing the AI attack surface and its technology will enable Tenable to expand its capabilities for detecting and assessing AI usage, including for governing usage, enforcing policies, and controlling exposure.
Zscaler acquires Red Canary
Zscaler plans to buy Denver-based managed detection and response (MDR) specialist Red Canary for $675 million. The deal adds technology for human monitoring and incident response on top of Zscaler’s zero trust cloud.
Other cybersecurity M&A deals announced in May 2025:
Arqit acquires Ampliphae’s technology IP
BCI acquires Trustlink Technologies
Cognyte acquires GroupSense
CPX acquires SpiderSilk
CXO acquires CIOsynergy, secureCISO and CFO.org events
Cyber Solutions acquires CleverTech
CYBERR acquires CyberTee
Efex acquires Datcom
Ekco acquires Predatech
Ekinops acquires Olfeo
Etisalat acquires Help AG
Five Tattva acquires major stake in Zeroday Ops Private Limited
Fivetran to acquire Census
IGEL acquires Stratodesk
Intelligent Technical Solutions acquires Black Breach
Limerston Capital acquires CyberCrowd
Mercury acquires Star Lab
Netrio acquires Agio
Ory acquires BoxyHQ
PartnerOne acquires XYPRO
Qubika acquires Nitra Security
Scytale acquires AudITech
Sensiba acquires AssuranceLab
SeSa acquires majority stake of Delta Tecnologías de Información SL
SurgeONE.ai acquires MGL Consulting
Tyto Athene acquires StackArmor
Vipre Security acquires Forensic and Compliance Systems
VTG acquires Byte Systems and Tunuva Technologies
Related: Cybersecurity M&A Roundup: 23 Deals Announced in March 2025
Related: Cybersecurity M&A Roundup: 31 Deals Announced in April 2025
Source: securityweek.com
