In August 2026, thirty-three cybersecurity-related merger and acquisition deals were announced, keeping the industry’s consolidation engine running at a brisk pace. The month’s roster included two high-value transactions that together account for more than $2.9 billion in disclosed spending — Visa’s $2.4 billion cash purchase of BioCatch and Munich Re’s $575 million acquisition of At-Bay — alongside a concentrated wave of AI-focused deals involving Fortinet, Palo Alto Networks, Cribl, and Deel. August also produced meaningful moves in offensive security, compliance and post-quantum encryption, managed services, and international expansion. The 33-deal tally follows 21 deals in July 2026 and 37 in June 2026, a cadence that suggests the security market remains in a sustained period of strategic consolidation.
August 2026 Cybersecurity M&A: 33 Deals, More Than $3 Billion in Value, and a Clear AI Security Theme
The August 2026 cybersecurity M&A roundup is notable not only for its volume but for the concentration of value in a handful of strategic transactions. Visa’s agreement to acquire BioCatch for $2.4 billion in cash was the largest deal by a wide margin. Munich Re’s $575 million agreement to acquire At-Bay was the second-largest disclosed transaction. Datavault AI’s all-cash agreement to acquire CyberCatch for $94.5 million was another significant figure, while Deel’s reported $40-50 million acquisition of Clarity and Echo’s estimated few-million-dollar purchase of Minimus assets rounded out the month’s known financial terms.
Many other deals were completed without disclosed financial details, which is typical for tuck-in acquisitions and private equity transactions. Still, the disclosed and estimated value in August comfortably exceeds $3 billion, making it one of the most financially significant months of 2026 so far.
- Visa to acquire BioCatch — $2.4 billion in cash.
- Munich Re to acquire At-Bay — $575 million.
- Datavault AI to acquire CyberCatch — $94.5 million in cash.
- Deel to acquire Clarity — reported to be valued at $40-50 million.
- Echo to acquire Minimus technology assets and contracts — estimated at a few million dollars.
What were the biggest cybersecurity acquisitions announced in August 2026?
The biggest disclosed deals in August 2026 were Visa’s $2.4 billion cash acquisition of BioCatch and Munich Re’s $575 million acquisition of At-Bay. Datavault AI’s $94.5 million all-cash purchase of CyberCatch was the next-largest announced price. Among technology-driven acquisitions, Fortinet bought Virtue AI, Palo Alto Networks bought Console, and Cribl acquired Radiant Security’s AI SOC technology assets.
Visa’s $2.4 Billion BioCatch Deal: Behavioral Intelligence Meets Payments Scale
Visa’s acquisition of BioCatch is the clearest signal yet that payment networks view fraud prevention as a core infrastructure component rather than an optional layer. BioCatch, a fraud prevention company, brings behavioral and device intelligence that can detect suspicious activity by analyzing how users interact with devices and digital applications. For Visa, the deal adds a sophisticated detection engine to its existing cyber, fraud, risk, and security product portfolio.
Behavioral intelligence works by profiling patterns such as typing speed, mouse movements, and navigation behavior. When a legitimate user behaves normally, those patterns create a baseline; when a fraudster attempts account takeover or payment fraud, the anomalies can be flagged in real time. By integrating BioCatch into Visa’s payment infrastructure, the company can offer financial institutions a more direct path to identifying fraud before a transaction is approved.
The all-cash structure and the size of the deal also suggest that Visa is treating cybersecurity capabilities as strategically important as its core payment network. With fraud attacks growing more sophisticated and generative AI making synthetic identities and deepfakes more convincing, payment firms need detection methods that go beyond passwords and static rules. BioCatch’s technology is designed to address exactly that gap.
Munich Re’s $575 Million At-Bay Acquisition: Cyber Insurance Meets Managed Detection and Response
Munich Re’s agreement to acquire California-based cyber insurtech At-Bay for $575 million reflects a structural change in how cyber insurance is underwritten. At-Bay will join Munich Re’s HSB unit, bringing with it a model that combines continuous risk mitigation and managed detection and response services with insurance coverage.
What does that combination mean in practice? Traditional cyber insurance policies rely on questionnaires, historical loss data, and point-in-time security reviews. At-Bay’s approach includes active monitoring, telemetry analysis, and incident response capabilities that give both the insurer and the policyholder a clearer view of risk in real time. For Munich Re, the acquisition is a way to move beyond passive risk transfer and into active risk reduction.
The deal also points to the growing convergence of insurance and security operations. MDR services can detect and contain threats before they become large claims, which improves loss ratios and gives policyholders practical support during an incident. At-Bay’s technology and service infrastructure will now be positioned inside one of the world’s largest reinsurers, giving it access to a global distribution network that could accelerate the adoption of integrated cyber insurance and security services.
Fortinet, Palo Alto Networks, and Cribl Bet on AI-Native Security and Agentic Operations
August 2026 was a defining month for AI-related cybersecurity M&A. Three major deals — Fortinet’s acquisition of Virtue AI, Palo Alto Networks’ acquisition of Console, and Cribl’s acquisition of Radiant Security’s technology assets — show how security platforms are racing to incorporate AI capabilities at multiple layers of the stack.
Fortinet adds agentic system red teaming with Virtue AI
Fortinet acquired Virtue AI, an AI security company, in a deal that will extend the company’s security offering to cover models, applications, and agentic systems. Agentic systems are AI-driven workflows that can make decisions and take actions based on goals, which introduces new security challenges: they can be manipulated, misconfigured, or given unsafe permissions. Virtue AI’s capabilities include agentic system red teaming, agent protection and governance, continuous AI validation, and real-time guardrails. For Fortinet, this means customers can deploy AI and automation with a defined security layer that verifies behavior and blocks unsafe actions.
Palo Alto Networks brings natural-language automation to Cortex with Console
Palo Alto Networks acquired Console, an AI-native platform that helps organizations build agentic workflows and automate operational tasks using natural language. The technology will be integrated into the Cortex platform, giving security teams a way to investigate signals, prioritize work, and automatically take action without writing complex code. Instead of manually creating playbooks, analysts can describe an investigation step in natural language and let the platform translate that intent into an automated workflow. That promises to reduce the time between detection and response, a critical factor in modern security operations.
Cribl picks up Radiant Security’s AI SOC technology assets
Cribl acquired technology assets and intellectual property from Radiant Security, a San Francisco-based AI-native security operations center startup. The deal gives Cribl access to autonomous alert triage and incident response capabilities that can be integrated directly into its telemetry data platform. Cribl’s position in the data pipeline means it can apply AI-driven triage at the point where security data is collected, normalized, and routed. For organizations drowning in alerts, the ability to automatically prioritize and even respond to incidents based on enriched telemetry is a compelling value proposition.
Taken together, these three deals show that AI is not just a feature added to existing security tools. It is becoming the operational layer that ties together data, analytics, automation, and response. The companies that can integrate AI deeply into their platforms are positioning themselves to offer security teams a fundamentally different way of working.
Deel’s Clarity Deal: Deepfake Detection Enters the Global Hiring Stack
Deel, the workforce and payroll platform, is acquiring Israel-based Clarity, an AI cybersecurity company that specializes in deepfake detection and identity verification. Financial terms were not officially disclosed, but the deal has been reported to be valued at $40-50 million. Deel will integrate Clarity’s technology to prevent identity fraud and detect deepfakes during remote workforce hiring.
The deal is a practical response to a new class of fraud: synthetic identities and AI-generated video and audio that can be used to impersonate contractors, employees, or job candidates. For a company whose business model depends on onboarding and paying workers across borders, verifying that a person is real is a fundamental security requirement. Clarity’s technology adds a layer of trust that is particularly important in a fully remote hiring environment.
This acquisition also illustrates the broadening definition of cybersecurity M&A. Deel is not a traditional security vendor, but it is buying security technology to protect a core business process. That pattern — non-security companies acquiring security capabilities — is likely to continue as identity verification, fraud detection, and deepfake prevention become essential to digital business operations.
Brinqa and PlexTrac: Closing the Loop Between Offensive Security and Exposure Management
Brinqa, a continuous threat exposure management company, acquired PlexTrac, a penetration testing workflow and reporting vendor. The acquisition integrates PlexTrac’s offensive security validation into Brinqa’s CTEM platform. The goal is to verify that remediation efforts actually work, not just to track whether a vulnerability was addressed.
Continuous threat exposure management is an approach that shifts away from periodic vulnerability scans and toward an ongoing cycle of discovery, prioritization, and validation. PlexTrac gives security teams and penetration testers a structured way to run offensive exercises, document findings, and track remediation. By combining that data with Brinqa’s exposure management platform, organizations can close the loop: they can identify a vulnerability, prioritize it based on real risk, test it from an attacker’s perspective, and then confirm that the fix removed the exposure.
This is an important deal because offensive security and exposure management have historically been separate workflows. Pentest findings often live in reports that are disconnected from the vulnerability management process. Brinqa’s acquisition of PlexTrac represents a move toward a unified system where offensive security data informs continuous risk decisions.
Datavault AI’s $94.5 Million CyberCatch Acquisition Adds Compliance and Post-Quantum Encryption
Datavault AI announced a definitive all-cash agreement to acquire San Diego-based CyberCatch for $94.5 million. CyberCatch provides a continuous compliance platform and post-quantum encryption technology. Datavault AI, which focuses on data monetization, credentialing, digital engagement, and real-world asset tokenization, will integrate those capabilities into its platform.
The compliance aspect of the deal is significant because organizations increasingly face continuous security and privacy requirements from customers, regulators, and cyber insurers. CyberCatch’s platform is designed to provide ongoing evidence of compliance rather than intermittent audit snapshots. For Datavault AI, that creates an opportunity to combine compliance data with credentialing and tokenization services, giving clients a more complete infrastructure for trusted digital transactions.
Post-quantum encryption is the other notable technical piece. Quantum computers are expected to eventually break many of the public-key cryptographic algorithms used today. Post-quantum encryption refers to new algorithms designed to be secure against quantum attacks. By adding CyberCatch’s post-quantum technology, Datavault AI is positioning itself for a future where data protection requires cryptographic resilience beyond current standards.
Kiteworks Acquires WAMNET Japan: A Seventh Deal and a New Geographic Footprint
Kiteworks announced its entry into Japan through the acquisition of WAMNET Japan K.K., a secure data transfer and file-sharing provider. The deal is Kiteworks’ seventh acquisition in less than five years and a clear step in its private content network strategy.
The PCN model unifies file sharing, managed file transfer, email, APIs, and web forms under a single governed platform. Rather than having different tools for different types of sensitive content, organizations can apply consistent security policies and audit controls across every communication channel. WAMNET’s existing contracts, pricing, and support arrangements will remain in place, and customer data will continue to be hosted in Japan.
Data sovereignty is a major driver of the WAMNET deal. Many Japanese organizations and multinational companies operating in Japan face regulatory expectations or corporate policies that require data to stay within the country. By acquiring a local provider with existing infrastructure, Kiteworks can offer its governance and security platform without forcing customers to move data across borders. This is a practical example of how M&A can be used to solve data residency challenges.
Echo Picks Up Minimus Assets After the Startup’s Operational Wind-Down
Echo acquired the technology assets and enterprise customer contracts of Minimus, a Tel Aviv-based hardened container image provider, in an all-cash deal. The transaction follows Minimus’s operational wind-down, which had been documented in earlier security coverage. Financial terms were estimated at a few million dollars.
Minimus specialized in hardened container images, which are container images stripped of unnecessary components and configured to reduce security risk. For organizations running cloud-native applications, using hardened container images is a basic but important step in reducing supply chain and runtime vulnerabilities. Echo’s acquisition brings those assets into a product that also includes proprietary agents powering its software factory.
The deal is notable for two reasons. First, it shows how valuable technology assets can be preserved even when a startup does not survive independently. Second, it gives Echo the ability to broaden distro support and expand integrations, which matters for teams that need hardened images across multiple Linux distributions and cloud environments. The enterprise customer contracts that came with the deal also provide an installed base that Echo can immediately support.
The Complete List of Other Cybersecurity M&A Deals Announced in August 2026
Beyond the marquee transactions, August 2026 included a wide range of deals across managed services, identity, AI, email security, private equity, and encrypted communications. The following is the full list of other transactions tracked in the monthly roundup.
- Ampcus acquired SmarterD, adding to its technology and digital services portfolio.
- Anaconda acquired Enkrypt, an AI security company focused on securing enterprise-scale AI deployments.
- Athena Agentic acquired Maxxsure and Omni Cyber Solutions, adding cyber risk quantification and an agentic platform to its unified cyber operations offering. The Omni Cyber Solutions transaction was Athena Agentic’s second acquisition of the year.
- AXA XL agreed to acquire S-RM, a global corporate intelligence and cybersecurity consultancy.
- BlueAlly acquired GigaNetworks, expanding its enterprise security and network solutions expertise.
- Bridgepoint acquired a majority stake in Lansweeper, a technology asset intelligence provider used to power enterprise cybersecurity programs.
- Cycurion entered an asset purchase agreement to acquire Kustom Entertainment’s legacy video solutions segment, a nondilutive deal expected to bring approximately 1,000 new clients and a portfolio of roughly 58 patents.
- ePlus acquired assets of Daymark Solutions, strengthening its IT infrastructure and security capabilities.
- Guardsix acquired Logmanager, expanding its security and compliance tooling.
- H.I.G. Capital completed the sale of ECI to Wind Point Partners, transferring ownership of the software and security-focused portfolio company between private equity firms.
- Image Solutions acquired Romeo Computer Company, a transaction announced by Kingsway Financial.
- Integrity360 acquired CyberIAM, an identity and access management specialist.
- LG Uplus acquired Pago Networks, adding network and security capabilities for the South Korean market.
- Logicalis US acquired Loial, expanding its cybersecurity services capacity.
- NetApp acquired JetStream Software, adding to its data infrastructure and management platform.
- New Charter acquired CyberTrust IT Solutions, expanding its managed IT and security offering in Southern California.
- Nexus IT acquired Loyal IT, a deal that expands its national platform into the Texas market.
- Privacy Bee acquired EraseMe.app, adding to its data privacy and personal data removal services.
- Redsquid acquired ARK ICT, deepening its managed services and cybersecurity capabilities.
- SEPPmail acquired CyberPilot, extending its email security and cyber protection portfolio.
- Systematic Growth acquired 4Secure, bringing the UK cyber firm into a Sweden-based technology group.
- Terma agreed to acquire Dencrypt A/S, a Danish company specializing in end-to-end encrypted communications.
- Universal Digital Inc. agreed to acquire PQCEE Pte Ltd, adding post-quantum cryptographic expertise through a definitive share exchange agreement.
What August’s 33 Deals Signal for the Cybersecurity Market
The August 2026 cybersecurity M&A roundup shows that consolidation is not slowing down. With 33 deals in August, 21 in July, 37 in June, and 426 acquisitions counted across the industry in 2025, the pattern points to a structural shift rather than a temporary burst of activity. Security vendors are assembling platforms that span multiple domains, and established technology and financial companies are buying their way into new capabilities with increasing urgency.
The month’s AI-related deals deserve special attention. Fortinet, Palo Alto Networks, and Cribl are all integrating AI into their core security platforms, but they are doing so from different angles: network security, security operations, and data pipelines. That suggests the next phase of security platform competition will be defined by which company can most effectively turn AI into measurable defense outcomes. Agentic security, red teaming for AI systems, and autonomous alert triage are no longer experimental concepts; they are becoming product requirements.
Another theme is the convergence of financial services and cyber risk. Visa and Munich Re are both betting that security capabilities can become embedded in financial and insurance products. For buyers, this means cyber insurance and fraud prevention will increasingly depend on active security monitoring and behavioral intelligence. For vendors, it means security technology is no longer sold only to CISOs; it is becoming a component of risk-based financial services.
The international dimension of August’s deals — Kiteworks in Japan, Terma in Denmark, AXA XL buying S-RM, and Systematic Growth acquiring 4Secure — also reinforces the importance of data sovereignty, local compliance, and regional trust. Cross-border M&A is being used as a way to enter regulated markets and establish trust with customers who demand local data handling.
For security leaders, the practical takeaway is to expect platform roadmaps to change. Several technologies announced in August, including BioCatch, Virtue AI, Console, Radiant Security, PlexTrac, and CyberCatch, will become integrated into larger portfolios over the next few quarters. That creates potential opportunities for deeper integration, but also uncertainty for existing customers. Security buyers should map which vendors they rely on, understand what the acquiring companies intend to do with the technology, and prepare for roadmap conversations. The momentum behind August 2026 suggests more deals are coming, and the most successful organizations will treat M&A risk as part of their vendor due diligence process.
