August M&A: Deals That Reshape Security

August 2026 brought another dense stretch of consolidation across the cybersecurity industry, with acquirers moving on penetration testing tools, AI security platforms, and fraud prevention vendors. SecurityWeek reported that 33 cybersecurity-related merger and acquisition (M&A) deals were announced during the month, a pace that keeps the sector on track for a busy year even by its own historical standards.

The month's activity wasn't confined to any single corner of the market. Buyers ranged from reinsurance giants to payments networks to venture-backed startups, and the targets spanned offensive security validation, post-quantum encryption, deepfake detection, and managed detection and response. For security leaders, the practical question is less who bought whom and more what happens to the products, roadmaps, and contracts they already depend on.

Exposure management meets offensive validation

Brinqa, a firm focused on Continuous Threat Exposure Management (CTEM), has acquired PlexTrac, which sells penetration testing workflow and reporting software. The stated logic is to fold PlexTrac's offensive security validation into Brinqa's CTEM platform so that remediation efforts can actually be verified rather than assumed.

That combination speaks to a persistent complaint from security teams: they can generate findings faster than they can prove they fixed them. By stitching pen testing workflows into an exposure management system, Brinqa is positioning validation as a native step in the remediation loop rather than a separate engagement that happens once or twice a year. The deal adds offensive tooling to a platform that has until now leaned on the defensive side of the ledger.

Cribl absorbs an AI-native SOC startup

Cribl has acquired the technology assets and intellectual property of Radiant Security, a San Francisco-based AI-native SOC startup. Cribl plans to integrate Radiant's autonomous alert triage and incident response capabilities directly into its telemetry data platform.

The structure of this deal is notable: it is an asset and IP purchase rather than a full company acquisition. For Cribl, a telemetry pipeline vendor, adding automated triage means moving up the stack from moving data to acting on it. For security operations teams already overwhelmed by alert volume, the appeal is straightforward — the platform that already ingests and routes their data would also begin to make first-pass judgments about what matters.

Datavault AI makes a $94.5 million compliance play

Datavault AI, which describes itself as a provider of data monetization, credentialing, digital engagement, and RWA tokenization solutions, announced a definitive all-cash agreement to acquire San Diego-based CyberCatch for $94.5 million. The acquisition integrates CyberCatch's continuous compliance platform and post-quantum encryption technology into Datavault AI's platform.

The pairing of compliance tooling with post-quantum encryption is an unusual one, and it reflects two pressures converging on enterprise buyers at once: the need to demonstrate continuous regulatory compliance, and the need to prepare for a future in which current cryptographic standards may no longer be sufficient. CyberCatch's platform is aimed at the first problem; its encryption work addresses the second.

Deel targets hiring fraud with Clarity

Deel has acquired Israel-based Clarity, an AI cybersecurity company specializing in deepfake detection and identity verification. Financial terms were not officially disclosed, but the deal is reportedly valued at $40-50 million. Deel will integrate Clarity's technology to prevent identity fraud and detect deepfakes during remote workforce hiring.

The use case is specific and increasingly common. Remote hiring pipelines are vulnerable to candidates who misrepresent their identity, and advances in synthetic media have made video interviews less trustworthy as a verification step. By bringing deepfake detection in-house, Deel is betting that identity assurance becomes a core feature of the hiring platform rather than a bolt-on check.

Echo picks up Minimus assets after wind-down

Echo has acquired the technology assets and enterprise customer contracts of Tel Aviv-based hardened container image provider Minimus in an all-cash deal following Minimus's operational wind-down. Financial terms were estimated at a few million dollars.

Echo said the deal enables it to broaden distribution support, expand integrations, and strengthen the proprietary agents powering its software factory. Acquisitions of this type — picking up assets after a company has wound down — are often as much about talent and customer relationships as technology. For Minimus customers, the immediate concern is continuity of support and the future of the hardened images they have built into their pipelines.

Fortinet goes shopping for AI security

Fortinet announced the acquisition of AI security company Virtue AI. Fortinet said the acquisition will help it enhance its AI security offering, including for models, applications, and agentic systems.

Fortinet will leverage Virtue's agentic system red teaming, agent protection and governance, continuous AI validation, and real-time guardrail capabilities. The emphasis on agentic systems is telling: as enterprises deploy autonomous agents that can take actions rather than just answer questions, the security surface shifts from protecting data to constraining behavior. Red teaming and guardrails for those agents are precisely the controls buyers are beginning to ask for.

Kiteworks expands into Japan

Kiteworks announced it is moving into Japan through its seventh acquisition in less than five years. The company has acquired WAMNET Japan K.K., a secure data transfer and file-sharing provider.

The deal extends Kiteworks' private content network (PCN) strategy — unifying file sharing, managed file transfer, email, APIs, and web forms under one governed platform — into a new geography. According to the announcement, WAMNET's existing contracts, pricing, and support stay in place, and customer data remains hosted in Japan. That last detail matters for organizations with data residency requirements, since it means the acquisition does not force a migration onto foreign infrastructure.

Munich Re agrees to buy At-Bay for $575 million

German reinsurance giant Munich Re has agreed to acquire California-based cyber insurtech At-Bay for $575 million. At-Bay will join Munich Re's HSB unit, combining continuous risk mitigation and MDR services with global insurance coverage.

The deal is one of the clearest examples this month of the ongoing convergence between insurance and security operations. Cyber insurers have spent years trying to price risk more accurately; MDR providers have spent the same years trying to reduce it. Putting both under one roof creates a model where the insurer has a direct hand in the controls that determine whether claims get paid.

Palo Alto Networks adds agentic workflow tooling

Palo Alto Networks has acquired Console, an AI-native platform that helps organizations build agentic workflows and automate operational tasks using natural language. The cybersecurity giant said Console will deepen the agentic capabilities of its Cortex platform, allowing security teams to investigate signals, prioritize work, and automatically take action across enterprise environments.

The acquisition fits a broader pattern in which large platform vendors are racing to add automation that goes beyond alerting. The pitch is that natural-language workflow building lowers the barrier for security teams to encode their own processes, rather than waiting on vendor-built playbooks. Whether that translates into faster response times is the open question every buyer will eventually test.

Visa bets on behavioral biometrics

Visa is buying fraud prevention company BioCatch for $2.4 billion in cash as the payments giant looks to expand its cybersecurity and financial crime detection capabilities. The acquisition will add BioCatch's behavioral and device intelligence to Visa's existing portfolio of cyber, fraud, risk and security products.

Behavioral biometrics — analyzing how a user interacts with a device rather than just whether their credentials are correct — has become a favored approach for catching account takeover and scam activity that slips past authentication. For Visa, owning that capability means it can bake fraud signals directly into the transaction flow rather than relying on third-party scoring.

The rest of the August deal list

Beyond the headline transactions, a long tail of smaller deals rounded out the month. SecurityWeek's roundup listed the following additional announcements:

• Ampcus acquires SmarterD
• Anaconda acquires Enkrypt
• Athena Agentic acquires Maxxsure and Omni Cyber Solutions
• AXA XL to acquire S-RM
• BlueAlly acquires GigaNetworks
• Bridgepoint acquires majority stake in Lansweeper
• Cycurion acquires Kustom Entertainment
• ePlus acquires Daymark
• Guardsix acquires Logmanager
• H.I.G. Capital sells ECI to Wind Point Partners
• Image Solutions acquires Romeo Computer Company
• Integrity360 acquires CyberIAM
• LG Uplus acquires Pago Networks
• Logicalis US acquires Loial
• NetApp acquires JetStream Software
• New Charter acquires CyberTrust IT Solutions
• Nexus IT acquires Loyal IT
• Privacy Bee acquires EraseMe.app
• Redsquid acquires ARK ICT
• SEPPmail acquires CyberPilot
• Systematic Growth acquires 4Secure
• Terma to acquire Dencrypt A/S
• Universal Digital Inc. to acquire PQCEE

What the numbers say

• 33 cybersecurity-related M&A deals were announced in August 2026.
• 21 deals were announced in July 2026, according to SecurityWeek's related roundup.
• 37 deals were announced in June 2026, per the same series.
• More than 420 acquisitions were announced in 2025, as detailed in SecurityWeek's annual M&A report.

Why this month's deals matter to buyers

For security leaders, the practical consequence of a month like this is not the headline valuations but the integration risk that follows. Every acquisition creates a period — often a long one — during which customers must guess which products will be maintained, which will be folded into a platform, and which will quietly be sunset.

The pattern across August's deals suggests buyers should pay attention to three areas in particular. First, identity and verification: Clarity going to Deel and BioCatch going to Visa both point to identity assurance being absorbed into larger platforms rather than sold as a standalone layer. Second, AI security and agent governance: Fortinet's purchase of Virtue AI and Palo Alto Networks' acquisition of Console show that the controls for autonomous systems are being built into existing security platforms. Third, validation and exposure management: Brinqa's absorption of PlexTrac is a bet that proving remediation is as important as finding flaws.

Customers of the acquired companies should be reading the fine print. Kiteworks' commitment that WAMNET contracts, pricing, and support stay in place, and that data remains hosted in Japan, is the kind of assurance that is not always offered. Echo's purchase of Minimus assets followed an operational wind-down, which is a reminder that asset deals do not always carry the same continuity guarantees as whole-company acquisitions. And reported valuations — like the $40-50 million figure attached to Deel's purchase of Clarity — are not the same as disclosed terms.

Taken together, the month's activity suggests a market where buyers are paying up for capabilities that are hard to build quickly: offensive validation, behavioral intelligence, deepfake detection, post-quantum readiness, and agentic automation. For vendors that possess those capabilities, the strategic options remain wide. For the enterprises relying on them, the work ahead is diligence — knowing which contracts, roadmaps, and data residency commitments survive the handshake.