37 M&A Operations in Cybersecurity: Key Acquisitions of October 2026
From the integration of firmware technologies to the expansion of AI solutions, the analysis of the most relevant transactions
KEY TAKEAWAYS
- Absolute Security acquires FirmGuard to integrate firmware technologies and enhance BIOS security
- Aikido Security launches Noon by acquiring OutKept and Cyberly to strengthen workforce security
- Anthropic acquires Opaque Systems to boost research on confidential AI
- Cohere acquires AISLE to create a new cybersecurity unit with autonomous AI systems
- Hex-Rays acquires HexAI for $30-35 million to develop new AI analysis tools
37 M&A operations in the cybersecurity sector in October 2026
The month of October 2026 recorded 37 mergers and acquisitions (M&A) operations in the cybersecurity sector, marking a growing trend compared to the 426 agreements recorded in 2025. These transactions reflect the ongoing market consolidation and the increase in investments in advanced cybersecurity technologies.
Quick Answer
The main acquisitions of October 2026 include the acquisition of FirmGuard by Absolute Security, the expansion of Aikido Security with the acquisition of OutKept and Cyberly, and the acquisition of Elisity by IonQ. These agreements cover key areas such as endpoint security, application security, and zero trust architecture.
Absolute Security expands firmware security capabilities
Absolute Security, specializing in endpoint security and cyber resilience, has acquired FirmGuard, the UEFI BIOS firmware security and management business of Phoenix Technologies. This acquisition will allow Absolute to integrate FirmGuard with its Absolute Persistence technology, offering management below the OS, continuous firmware integrity monitoring, patching, and compliance enforcement.
Aikido Security launches Noon with strategic acquisitions
Aikido Security, a Belgian unicorn in application security, has acquired OutKept and Cyberly to launch Noon, a new business unit dedicated to workforce security. OutKept, based in Belgium, focuses on phishing simulations and security training, while Cyberly, based in Poland, develops AI-based attack simulation tools and monitoring of AI usage by employees.
Anthropic strengthens AI security with Opaque Systems
Anthropic, a leader in the AI sector, has reached an agreement to acquire Opaque Systems, a spin-off of research from the University of California at Berkeley. The acquisition includes the licensing of Opaque's technology and the hiring of some of its engineers, including CEO Aaron Fulkerson and CTO Rishabh Poddar. Financial details have not been made public.
Cohere acquires AISLE to enhance AI security
Cohere, a Canadian developer of AI technologies, has signed a letter of intent to acquire AISLE, a startup specializing in autonomous AI systems for the discovery and patching of critical vulnerabilities. The approximately 50 employees of AISLE will join Cohere, which is creating a new cybersecurity unit called Cohere Cyber. Ondřej Vlček, former CEO of Avast, will become senior vice president of this new unit.
Hex-Rays expands reverse engineering capabilities with HexAI
Hex-Rays, the Belgian company behind the reverse engineering tool IDA Pro, has acquired HexAI, an Israeli startup founded in 2025. HexAI uses AI agents to analyze source code and binaries for vulnerabilities, malware, and backdoors. The deal, valued at $30-35 million, will allow Hex-Rays to expand HexAI's operations in Israel and develop new AI-based research tools.
IonQ acquires Elisity to enhance zero trust security
IonQ, a quantum computing company, has reached an agreement to acquire Elisity, a zero trust security company, in a deal worth up to $1.3 billion, including up to $150 million in performance-based earnouts. IonQ will integrate Elisity's post-quantum cryptography and quantum key distribution technology with its IdentityGraph platform, which manages least-privilege access for users, devices, workloads, and AI agents.
Proofpoint acquires Varonis for $6.3 billion
Proofpoint, a subsidiary of Thoma Bravo, has acquired Varonis, a data security company, for approximately $6.3 billion in cash. The goal is to offer a unified platform for the discovery and protection of sensitive data, access control, and data loss prevention, particularly in scenarios of AI technology adoption.
Other acquisitions in the cybersecurity sector
In addition to the main operations, October 2026 saw other significant acquisitions in the cybersecurity sector. These operations reflect the ongoing evolution of the market and the strategic importance of cybersecurity technologies. For a more detailed analysis of the previous month's operations, see also our September 2026 roundup.
Market impact and future prospects
These acquisitions indicate a growing emphasis on endpoint security, the protection of sensitive data, and the integration of advanced technologies such as AI and quantum computing. Companies are heavily investing to strengthen their security capabilities and respond to growing cyber threats. For further insights, explore our guide on M&A operations in 2025.
The long wave of digital transformation and the increase in cyber risks
This flow of M&A operations is part of the broader context of accelerated digital transformation, which has seen a 30% increase in cyber risks in 2026 according to the annual report of SecurityWeek. Companies are massively investing in advanced solutions to address increasingly sophisticated threats, with a particular focus on ransomware and supply chain attacks.
The impact on the cyber insurance market
This consolidation of the cybersecurity market is having significant repercussions on the cyber insurance sector. According to CyberRisk Alliance data, the average cost of cyber risk policies increased by 25% in 2026, with premiums reaching $20,000 for large companies. Insurance companies are becoming more selective, requiring concrete proof of NIS2 compliance and implementation of managed Security Operations Centers (SOC as a Service).
The challenge of NIS2 and DORA compliance
The recent acquisitions highlight the urgency of addressing evolving regulations. The NIS2 directive and the DORA regulation are pushing organizations to invest in identity management (IAM) and Data Loss Prevention (corporate DLP). In particular, the acquisition of Varonis by Proofpoint aims to create a unified platform for protection of sensitive data, crucial for meeting the requirements of digital operational resilience.
The integration of AI and quantum computing in cybersecurity
The acquisition of Opaque Systems by Anthropic and that of AISLE by Cohere signal a trend towards the integration of advanced technologies such as AI and quantum computing. These developments could revolutionize incident response and breach remediation, enabling faster and more effective vulnerability discovery and patching. However, the adoption of these technologies also requires ISO 27001 certification and rigorous security audits.
Implications for companies
For companies, these acquisitions represent both opportunities and challenges. On the one hand, access to more advanced technologies can improve ransomware protection and ransomware recovery. On the other hand, the need to integrate new solutions with existing systems requires specialized skills and an MDR service (Managed Detection and Response) to continuously monitor threats. Companies must also consider the impact of these operations on their cyber insurance costs and the need for secure crypto asset management.
The future of the cybersecurity market
Looking ahead, the market for mergers and acquisitions in the cybersecurity sector is expected to continue to grow, with a particular focus on technologies such as AI, quantum computing, and zero trust architecture solutions. Companies that invest today in these technologies will be better prepared to face tomorrow's threats. However, the increasing complexity also requires robust crypto AML compliance and KYC exchange, especially for companies operating in the cryptocurrency sector.
Frequently Asked Questions
What is the impact of acquisitions in the cybersecurity sector on insurance premiums?
Acquisitions are pushing insurance companies to require stronger proof of security, increasing cyber risk policy premiums by 25% in 2026.
How do NIS2 and DORA regulations influence corporate security strategies?
The regulations require investments in IAM and corporate DLP, pushing companies to adopt more advanced solutions for the protection of sensitive data.
What are the emerging technologies that are changing the cybersecurity landscape?
Technologies such as AI, quantum computing, and zero trust solutions are revolutionizing incident response and breach remediation.
Editorial Note and Disclaimer
The guides and content published on GoYou are the result of independent research and analysis activities, for informational, educational, and in-depth purposes.
GoYou does not constitute a journalistic publication nor an editorial product pursuant to Law No. 62/2001 and does not provide real-time information.
The GoYou project does not provide professional, technical, legal, or financial advice and disclaims all responsibility for the improper use of the information published.
In the Crypto sector, every investment involves risks: readers are invited to always inform themselves autonomously before making any decision.
Source: securityweek.com · GoYou.it is not a registered news outlet; all content is for informational and educational purposes.
