Cybersecurity M&A Deals: 21 Transactions Announced in July 2026

Post Views: 8

Twenty-one cybersecurity-related merger and acquisition (M&A) transactions were disclosed during July 2026.

Below is an analysis of key cybersecurity M&A activities announced in July 2026:

Bank of America to acquire MDSec

Bank of America has finalized the acquisition of MDSec Consulting Limited, a United Kingdom-based information security consultancy. The firm specializes in technical information security consulting and employs approximately 65 cybersecurity professionals. This transaction enhances Bank of America’s operational footprint in northern England.

Barracuda acquires Evo Security

Barracuda Networks completed the purchase of Texas-based Evo Security, though the financial terms remain undisclosed. The integration expands the BarracudaONE platform by incorporating multi-tenant identity management, identity and access management (IAM), and privileged access management (PAM) capabilities tailored for managed service providers (MSPs).

Cribl acquires CardinalOps

San Francisco-based Cribl acquired Israeli artificial intelligence detection engineering startup CardinalOps. The deal introduces automated detection engineering features to Cribl’s AI-driven platform, enhancing threat detection efficiency and reducing log management expenses for enterprise security operations centers (SOCs). Cribl is establishing a new office in Tel Aviv following the acquisition.

CrowdStrike to acquire XM Cyber IP

CrowdStrike has secured the patents and source code of Israel’s XM Cyber from Schwarz Group for an undisclosed sum. This acquisition enables CrowdStrike to integrate exposure management and attack-path analysis directly into its product suite. Schwarz Group previously acquired XM Cyber in 2021 for $700 million.

Cyera to acquire Oasis Security

California and Israel-based Cyera has agreed to purchase Israeli startup Oasis Security in a deal valued at approximately $1 billion. The transaction combines Cyera’s data security platform with Oasis’s non-human identity governance solutions to safeguard enterprise AI agents and service accounts.

Infoblox to acquire Kentik

Infoblox has entered a definitive agreement to acquire network intelligence and observability platform Kentik, with financial details undisclosed. The integration merges Infoblox’s DNS and network context data with Kentik’s real-time network traffic analytics to strengthen hybrid cloud security resilience.

Okta to acquire Permiso Security

Okta finalized the acquisition of Palo Alto-based Permiso Security for an estimated $200 million. The deal enhances Okta’s capabilities in continuous identity threat detection (ITDR), providing protection for human, machine, and autonomous AI identities across cloud environments.

Palo Alto Networks to acquire Embrace

Palo Alto Networks plans to acquire the user-focused mobile and web observability platform Embrace. The integration will incorporate Embrace’s mobile observability and real-time user telemetry into Palo Alto’s ecosystem, unifying mobile experience monitoring with threat visibility.

Qualcomm acquires SAM Seamless Network

Qualcomm acquired Israeli IoT cybersecurity startup SAM Seamless Network for over $100 million. The transaction embeds SAM’s network security software into Qualcomm’s wireless chipsets and gateways to secure communication networks. SAM’s clients include U.S. telecommunications providers AT&T and Verizon.

Additional cybersecurity M&A transactions in July 2026 include:

CompassMSP acquiring The Logic Group
CyberNut acquiring Neptune
Databarracks acquiring Acumen
DataExpert Group acquiring ADO Security
Katalyst acquiring Layer27
Keyfactor acquiring Cofide
NINJIO acquiring SafeStack
TAC InfoSec acquiring Safehouse Technologies
Sundance Networks acquiring 20 firms
Veridas acquiring Fourthline
Viatel Technology Group acquiring FullProxy
Webacy acquiring Trugard Labs

Technical details, financial figures, and strategic objectives for each transaction remain consistent with the original disclosures. No alterations to factual data, timelines, or operational impacts have been made.