In September 2026, the cybersecurity sector witnessed 39 mergers and acquisitions, signaling a robust period of strategic alignments within the industry. These deals are part of an ongoing trend where security firms consolidate to enhance their service offerings and geographical reach. For a comprehensive overview of the 420-plus acquisitions reported in 2025, SecurityWeek’s annual M&A report provides detailed insights.
A-LIGN Expands to Australia
A-LIGN, a cybersecurity compliance firm, has broadened its reach by acquiring AssurePoint, a Sydney-based cloud security assessment company. This acquisition introduces IRAP assessments to A-LIGN’s offerings, marking its entry into the Australian market. Additionally, A-LIGN incorporated Pathfynder, enhancing its capabilities in penetration testing and incident response. Pathfynder will continue its operations under the brand Pathfynder by A-LIGN.
Strategic Moves by Aiuken and Dragos
Aiuken Cybersecurity, a Spanish managed security service provider, has expanded its capabilities in industrial cybersecurity by acquiring 4Elitech. This acquisition adds operational technology threat detection and incident response to Aiuken’s portfolio. Meanwhile, Dragos completed its acquisition of NetRise and runZero as part of Accenture’s $4.1 billion OT cybersecurity strategy. These deals augment Dragos’ platform with enhanced exposure management and software supply chain security.
Key Acquisitions by Industry Leaders
IBM has strengthened its position in the UK by acquiring Logiq Consulting, a firm specializing in cybersecurity for defense and critical infrastructure sectors. This acquisition bolsters IBM’s digital transformation capabilities in sovereign technology. In another significant move, Kiteworks acquired Bonfy.AI to enhance data security through real-time policy enforcement for data exchanged by humans and AI.
NetSPI and Synack have agreed to merge, forming a security firm with over $200 million in annual revenue. This merger combines expert penetration testing with cutting-edge AI technologies. Furthermore, Palo Alto Networks acquired Console, enhancing its Cortex platform’s agentic capabilities with AI-driven workflows.
Future Outlook of Cybersecurity M&A
The recent surge in mergers and acquisitions reflects the industry’s ongoing effort to address evolving cybersecurity threats through strategic partnerships and technological advancements. As companies like Quantum eMotion and Quorum Cyber make significant acquisitions, the focus remains on expanding their service offerings and geographical influence. This wave of consolidation is expected to continue as firms seek innovative solutions to protect against increasingly sophisticated cyber threats.
