Cybersecurity M&A Roundup: 39 Deals Announced in September 2026
Thirty-nine cybersecurity-related merger and acquisition deals were announced during September 2026, highlighting significant industry consolidation and investments in AI, compliance, and industrial security.
Radwan AbdulhadiEditor and technology writer
Overview of September 2026 Cybersecurity M&A
The cybersecurity sector witnessed significant consolidation during September 2026, with a total of 39 merger and acquisition deals announced throughout the month. These transactions span various domains, including compliance, industrial security, cloud protection, and artificial intelligence-driven tools. For a detailed view of historical market trends, analysts frequently look back at SecurityWeek’s annual M&A report to track the broader trajectory of industry transactions.
Major Compliance and Industrial Security Acquisitions
Compliance and regional expansion drove several key deals early in the month. Cybersecurity compliance firm A-LIGN expanded its international footprint by acquiring Sydney-based AssurePoint, a cloud security assessment company that adds IRAP assessments to its portfolio. Additionally, A-LIGN acquired Pathfynder to bolster its penetration testing and incident response services. In the industrial sector, Spanish managed security provider Aiuken Cybersecurity acquired 4Elitech to enhance its operational technology threat detection capabilities.
Significant Moves by Dragos, IBM, and Kiteworks
Major industry players also completed notable structural additions. Dragos officially completed its acquisitions of NetRise and runZero as part of Accenture's broader operational technology cybersecurity push. These additions bring firmware-level insight and asset discovery capabilities directly into the Dragos platform. Meanwhile, IBM expanded its sovereign technology capabilities in the UK by acquiring Logiq Consulting, a firm serving the UK defense, government, and critical infrastructure sectors. Furthermore, Kiteworks integrated AI data security capabilities by acquiring Bonfy.AI to extend real-time policy enforcement across human users and AI agents.
Palo Alto Networks and Offensive Security Consolidations
Artificial intelligence integration remained a prime driver for high-value transactions. Palo Alto Networks acquired Console, an AI-native platform for building agentic workflows using natural language, in a cash transaction valued at $500 million to deepen agentic capabilities within its Cortex platform. In another major market development, NetSPI and Synack agreed to merge to form an offensive security company backed by KKR, combining expert penetration testers with agentic AI for continuous security testing.
Cloud, Risk Management, and Additional Transactions
Other notable transactions during September 2026 included Pistachio acquiring the intellectual property of Hugin.io to expand into compliance management, and Quantum eMotion agreeing to acquire Plurilock Security to strengthen its cybersecurity revenue base. Quorum Cyber also targeted international growth by agreeing to acquire managed extended detection and response provider Ontinue. Additionally, cloud security firm Upwind acquired Israeli AI security startup Aegis to launch Upwind AI Security Labs.
Sources
- SecurityWeekCybersecurity M&A Roundup: 39 Deals Announced in September 2026
Continue chronologically
Related stories
Kiteworks Patches Max-Severity Code Injection Flaw
Secure file-sharing company Kiteworks releases security updates addressing 126 vulnerabilities, including a max-severity code injection flaw in its EPG solution.
Anthropic Partners with Accenture for AI Safety Evaluations
Anthropic has tapped Accenture to provide third-party safety evaluations for its frontier AI models, marking a major step in slowing AI development.
NetScaler Zero-Day Attacks Hit Government and Finance Sectors
Government and financial organizations in North America and Europe face weeks-long zero-day attacks exploiting NetScaler vulnerabilities.
Google Japan Reveals Conveyor-Belt Gboard Keyboard
Google Japan has unveiled its latest quirky keyboard creation: a 3D-printable Gboard featuring moving conveyor belts designed for easier one-handed typing.
