33 cybersecurity M&A deals announced in August 2026

Thirty-three cybersecurity mergers and acquisitions were announced in August 2026, including transactions by payment companies, insurers, infrastructure vendors and security specialists. Deal sizes ranged from Visa’s $2.4 billion purchase to smaller asset transfers reportedly worth a few million dollars.

Visa agreed to acquire behavioral fraud specialist BioCatch for $2.4 billion in cash. Visa will add BioCatch’s behavioral and device intelligence to its cyber, fraud, risk and security products to expand payment fraud detection capabilities.

Munich Re reached an agreement to buy cyber insurtech At-Bay for $575 million. At-Bay is set to join Munich Re’s HSB unit and its continuous risk mitigation and managed detection and response services will be combined with Munich Re’s insurance offerings for commercial customers.

Palo Alto Networks acquired Console, an AI-native platform that builds agentic workflows and automates operational tasks with natural language. The company plans to integrate Console into its Cortex security platform to speed investigation and remediation work.

Fortinet purchased Virtue AI to extend its AI security portfolio. Virtue AI’s tools cover agent protection, agentic system red teaming, continuous AI validation and real-time guardrails for models and applications.

Brinqa acquired PlexTrac to bring penetration-test workflow and reporting into its Continuous Threat Exposure Management platform to verify remediation efforts. Cribl bought technology assets and intellectual property from Radiant Security to add autonomous alert triage and incident response to its telemetry data platform.

Datavault AI agreed to acquire CyberCatch for $94.5 million in cash. The deal adds CyberCatch’s continuous compliance platform and post-quantum encryption features to Datavault AI’s data and credentialing offerings.

Deel bought Israeli deepfake detection and identity verification startup Clarity in a deal reported at $40 million to $50 million to reduce identity fraud in remote hiring. Echo acquired the technology assets and enterprise contracts of Minimus after that vendor wound down operations, and Kiteworks entered Japan by purchasing WAMNET Japan K.K., retaining local contracts and keeping customer data hosted in Japan.

Other announced transactions included NetApp’s acquisition of JetStream Software and a series of regional and asset-focused deals that transferred customer contracts, technology assets or majority stakes to larger integrators and private equity firms. Announced acquisitions covered areas such as AI-native security capabilities, fraud and device intelligence, telemetry and incident response, identity verification and cyber insurance integration.