Recommended Free Tools
SecurityWeek’s roundup, published January 6, 2026, counts 30 cybersecurity-related transactions announced in December 2025. The largest disclosed deal was ServiceNow’s proposed $7.75 billion cash acquisition of Armis. The list also includes a reported $1 billion ServiceNow–Veza transaction and BigBear.ai’s finalized $250 million acquisition of Ask Sage. These are not all conventional cybersecurity-software acquisitions: the roundup spans cloud and edge computing, AI safety, identity, cyber services, hardware security and intelligence.
How the 30 transactions are counted
The count is transactions, not buyers or completed acquisitions. Each buyer-target deal is counted separately, so Integrity360’s purchases of Cresco and Redshift make two entries, as do ServiceNow’s proposed Armis and Veza deals. The roundup also includes a merger and an investment involving post-quantum-cryptography intellectual property. “Announced” does not mean every transaction had closed.
SecurityWeek’s seven featured sections represent nine transactions; 21 more make up the rest of the list.
| Part of roundup | Transactions |
|---|---|
| Featured transactions | 9 |
| Other listed transactions | 21 |
| Total | 30 |
The underlying list uses a broad cybersecurity-related definition: it covers security vendors and services, but also adjacent cloud, AI, identity, hardware and defense-technology businesses. The complete list and count come from SecurityWeek’s December 2025 roundup.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall#1 Best Overall
Which December deals had disclosed or reported values?
Only a small number of transactions in the available roundup have a stated value. The Veza amount is reported, not an officially disclosed purchase price in the cited material; most other deals had no value stated.
| Buyer | Target | Value | Status and qualification |
|---|---|---|---|
| ServiceNow | Armis | $7.75 billion cash | Announced acquisition; the announcement is not proof of closing. SecurityWeek |
| ServiceNow | Veza | Approximately $1 billion | Reported figure; treat as a reported valuation, not an officially disclosed price. SecurityWeek |
| BigBear.ai | Ask Sage | $250 million | BigBear.ai described the transaction as finalized. BigBear.ai investor relations |
| Other transactions | Various | Not disclosed | No value stated in the roundup; do not infer one from company size or strategic importance. |
ServiceNow–Armis was the month’s largest clearly disclosed transaction by value. Separately, SecurityWeek’s annual acquisitions coverage reported that 2025 saw 426 deals, eight acquisitions of pure-play cybersecurity firms above $1 billion, and more than $84 billion in disclosed value. Those are full-year figures, not December totals. SecurityWeek’s acquisitions coverage
Featured transactions and why they matter
ServiceNow–Armis and ServiceNow–Veza: asset visibility and identity
ServiceNow announced a proposed $7.75 billion cash acquisition of Armis, whose technology provides visibility into assets across IT, operational technology and IoT environments. The strategic logic is to expand ServiceNow’s security and risk-management capabilities; the proposed price and status are detailed in SecurityWeek’s Armis report.
ServiceNow was also reported to be acquiring Veza, an identity-security and authorization company, for approximately $1 billion. That figure remains a reported amount in the cited roundup, rather than a confirmed official purchase price. Together, the transactions point to an effort to connect asset context with identity and authorization capabilities.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Akamai–Fermyon: serverless computing at the edge
Akamai announced its acquisition of Fermyon on December 1. Fermyon’s WebAssembly function-as-a-service technology is intended to extend Akamai’s edge-computing platform. Akamai said the combination could help customers deploy edge-native applications and bring compute closer to its performance and security services. Fermyon is primarily a serverless and edge-cloud company, making this a cybersecurity-adjacent infrastructure deal rather than a conventional security-product acquisition. Akamai’s announcement
Checkmarx–Tromzo: AI agents for application security
Checkmarx announced the Tromzo acquisition on December 9. Tromzo brought AI-native autonomous security-agent technology and an engineering team. Checkmarx said it would use those capabilities to strengthen Checkmarx One and its Checkmarx Assist AI-agent portfolio, reflecting the push toward automated application-security triage and remediation. Checkmarx’s announcement
Red Hat–Chatterbox Labs: AI safety and guardrails
Red Hat acquired Chatterbox Labs, adding AI-security and safety capabilities. The stated strategic fit is AI safety testing and guardrails alongside Red Hat’s AI and MLOps capabilities. This is best understood as AI security and governance, not as a traditional network- or endpoint-security acquisition. Red Hat’s announcement
Outpost24–Infinipoint: device trust and workforce access
Outpost24 acquired Infinipoint, whose technology addresses device identity, posture validation and secure workforce access. Outpost24 characterized the deal as an expansion into zero-trust workforce access and identity security, illustrating how exposure management can converge with device trust and access controls. Outpost24’s announcement
Silent Push–HYAS: threat intelligence and protective DNS
Silent Push acquired threat-intelligence and protective-DNS provider HYAS. The intended expansion includes proactive threat intelligence, protective DNS, customer reach and operational capabilities. The source says HYAS personnel would join Silent Push and the business would operate under the Silent Push brand. Silent Push’s announcement
Rank #4
Integrity360–Cresco and Integrity360–Redshift: regional services expansion
Integrity360 made two separate acquisitions. Cresco is a cybersecurity-services consultancy serving Belgium and Luxembourg. Redshift is a South African penetration-testing company; Integrity360 said the deal would strengthen its South African presence and SOC capabilities. Taken together, the transactions show a regional expansion strategy through services businesses, but they remain two distinct entries in the 30-deal count. SecurityWeek’s roundup
All 30 cybersecurity-related transactions
The table follows SecurityWeek’s list. “Value not stated” means no amount is provided in the roundup; it does not imply that the transaction had no value. Status wording is deliberately limited where the available source does not establish whether a deal closed.
| # | Buyer | Target or transaction | Primary category | Value or status note |
|---|---|---|---|---|
| 1 | Akamai | Fermyon | Edge/serverless cloud; WebAssembly | Value not stated; acquisition announced |
| 2 | Checkmarx | Tromzo | Application security; AI agents | Value not stated; acquisition announced |
| 3 | Integrity360 | Cresco | Cybersecurity consulting | Value not stated |
| 4 | Integrity360 | Redshift | Penetration testing; SOC services | Value not stated |
| 5 | Outpost24 | Infinipoint | Device identity; zero-trust access | Value not stated |
| 6 | Red Hat | Chatterbox Labs | AI security and safety | Value not stated |
| 7 | ServiceNow | Armis | IT/OT/IoT asset visibility | $7.75 billion cash; announced acquisition |
| 8 | ServiceNow | Veza | Identity security | Approximately $1 billion, reported |
| 9 | Silent Push | HYAS | Threat intelligence; protective DNS | Value not stated |
| 10 | Aretum | Veterans Engineering | Government/defense technology services | Value not stated |
| 11 | Arteris | Cycuity | Hardware and semiconductor security | Value not stated |
| 12 | Bastion | Phronesis Security | Cybersecurity services | Merger; value not stated |
| 13 | BigBear.ai | Ask Sage | Secure enterprise AI | $250 million; transaction described as finalized by BigBear.ai |
| 14 | Broadwing Capital | CloudScale365 | Managed IT/cloud services | Value not stated |
| 15 | BTQ | Keypair investment / post-quantum-cryptography intellectual property | Post-quantum cryptography | Investment/IP transaction; not described here as a full acquisition |
| 16 | Cyderes | Lucidum | Cyber asset intelligence; security data | Value not stated |
| 17 | Harbor IT | ZAG Technical | Managed IT/security services | Value not stated |
| 18 | ID-Pal | NorthRow | Identity verification; know-your-business | Value not stated |
| 19 | Infinum | AMR CyberSecurity | Cybersecurity services | Value not stated |
| 20 | itSynergy | Comply’s Itegria Business | Compliance/IT services | Value not stated |
| 21 | Limerston Capital | Aristi | Cybersecurity services | Value not stated |
| 22 | MetaCompliance | Junglemap | Security awareness and compliance training | Value not stated |
| 23 | Northern Telecom | C-STEM | IT/cybersecurity services | Value not stated |
| 24 | oXya | Axl & Trax | SAP/IT and security services | Value not stated |
| 25 | Red River | Invictus | Cyber and enterprise modernization | Value not stated |
| 26 | SPIE | Cyqueo | Cybersecurity and digital services | Value not stated |
| 27 | Symposit | HumanLink | Technology services | Value not stated |
| 28 | Synergy ECP | NetServices | Managed services | Value not stated |
| 29 | Woven Solutions | Cystemic Security | Cybersecurity services | Value not stated |
| 30 | TRM | Sheffield Scientific | Blockchain intelligence; investigations | Value not stated |
For deal-by-deal descriptions beyond the featured transactions, SecurityWeek’s roundup is the source for this list. Selected company announcements provide additional detail on the strategic rationale: Cyderes–Lucidum, ID-Pal–NorthRow, MetaCompliance–Junglemap, Red River–Invictus, and TRM–Sheffield Scientific.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteBest Value
What patterns stand out in the deal mix?
Identity and access recur in different forms
Veza focuses on identity security and authorization; Infinipoint brings device identity and workforce access; ID-Pal and NorthRow combine identity verification with know-your-business capabilities. MetaCompliance’s Junglemap deal sits nearby through security-awareness and compliance training. These are related but not interchangeable capabilities, so the list supports calling identity a recurring theme—not claiming it was the numerically dominant category.
AI appears both as a security capability and as an enterprise application
Checkmarx–Tromzo concerns AI agents for application security, while Red Hat–Chatterbox Labs concerns AI safety testing and guardrails. BigBear.ai–Ask Sage is a secure enterprise-AI transaction, finalized for $250 million; it should not be recast as a conventional cybersecurity-software acquisition. The deals show distinct ways AI enters security-related M&A rather than proving that AI dominated the month.
Services consolidation runs alongside software deals
Consultancies, managed-service providers, penetration testers, compliance businesses and regional technology providers make up a substantial part of the roundup. Acquisitions of this kind can add geographic reach, personnel, customer relationships and service capacity; the cited material does not establish that these benefits have already been realized. Because services and software businesses have different models, their transactions should not be compared directly with billion-dollar software deals without accounting for those differences.
Security boundaries extend into infrastructure and intelligence
Fermyon brings edge and WebAssembly technology; Cycuity addresses semiconductor and hardware security; BTQ’s Keypair transaction involves post-quantum-cryptography intellectual property; Lucidum adds cyber-asset intelligence and security data; and Sheffield Scientific brings blockchain intelligence and investigations. Their inclusion reflects the roundup’s broad cybersecurity-related scope, not a claim that each target is a pure-play security vendor.
Quick Recap
How to read the roundup responsibly
- Separate announcement from completion. ServiceNow’s Armis transaction was announced as an acquisition; BigBear.ai described Ask Sage as finalized. Do not treat every entry as closed.
- Keep price attribution attached. Armis’s $7.75 billion is the announced cash price; Veza’s approximately $1 billion is reported; Ask Sage’s $250 million is stated in BigBear.ai’s finalized-transaction announcement.
- Do not equate all 30 with pure-play cyber vendors. The entries include cybersecurity providers as well as adjacent cloud, AI, hardware, IT-services, defense and intelligence businesses.
- Do not infer undisclosed values or realized synergies. Most values are not stated in the roundup, and buyer descriptions of expected strategic benefits are not evidence that those benefits have already occurred.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
