SecurityWeek counted 36 cybersecurity-related transactions announced in August 2024, from platform acquisitions and a private-equity majority investment to managed-services roll-ups and cyber-adjacent deals. The count describes announcements, not 36 completed acquisitions; several transactions closed later, and most prices were not disclosed.
What the 36-deal count means
SecurityWeek published its roundup on September 6, 2024, counting transactions announced during August. Its broad cybersecurity-related category includes more than pure-play security software: the list also covers IT and managed services, compliance, communications, supply-chain intelligence, defense technology, privacy, and other adjacent areas. Exiger’s purchases of aDolus and XSB count as two transactions. The figure is SecurityWeek’s editorial tracker total, not an official industry-wide database count or a claim that every transaction closed in August.
SecurityWeek also counted 178 cybersecurity M&A deals announced in the first half of 2024, describing it as the least busy first half since it began tracking the category in 2021. That comparison is the publication’s tracker finding, not an independently audited market total. Read SecurityWeek’s August roundup.
Strategic deals that show where buyers were investing
Check Point and Cyberint: external-risk management
Check Point announced a definitive agreement to acquire Cyberint on August 27, 2024. Cyberint’s external-risk and threat-intelligence capabilities cover issues such as exposed credentials, impersonation, fake websites, leaked data, and attack-surface management. Check Point said the deal would expand security-operations and managed threat-intelligence capabilities. The original announcement did not disclose a price. Check Point later reported completing the acquisition on September 30, 2024, and its subsequent SEC filing disclosed approximately $188.6 million in total consideration. Contemporary reports cited by SecurityWeek had put the price at roughly $200 million; the later filing is the more precise disclosed figure. Check Point’s announcement · SEC filing.
Recommended Free Tools
#1 Best Overall
Cisco and Robust Intelligence: security for AI systems
Cisco announced its intent to acquire Robust Intelligence on August 26, 2024. The target focused on securing AI models and applications across development and production, rather than simply adding AI features to a conventional security product. Cisco said the technology would support its Security Cloud and help customers adopt AI more securely. Cisco announced completion on September 24, 2024; its current company page says Robust Intelligence became part of Cisco in October 2024. The cited announcements do not establish a purchase price, so it is best treated as undisclosed. Cisco’s announcement · Cisco’s current company page.
DigiCert and Vercara: digital trust meets online protection
DigiCert announced a definitive agreement to acquire Vercara on August 14, 2024. Vercara brought managed authoritative DNS, DDoS protection, and cloud security for online networks and applications. The strategic fit extends DigiCert’s digital-trust portfolio beyond certificates into broader protection of an organization’s online presence. The cited announcement did not disclose the purchase price, and an August agreement should not be mistaken for an August closing. DigiCert’s announcement.
Fortinet and Next DLP: data loss and insider risk
Fortinet announced its Next DLP acquisition on August 6, 2024, and said the transaction had signed and closed as of August 5. Next DLP added cloud-native data-loss prevention, data classification, anomaly detection, and insider-risk capabilities. Fortinet described the purchase as a way to strengthen standalone DLP and integrate data protection across its endpoint and SASE offerings. The cited announcement did not disclose a price. Fortinet’s announcement.
EQT and Acronis: a majority investment, not a simple buyout
EQT agreed to acquire a majority stake in Acronis, whose products span backup, data protection, and cyber protection. This is a majority investment rather than an outright acquisition of the whole company. SecurityWeek reported that the deal remained subject to regulatory approvals and was expected to complete in 2025. The cited roundup did not disclose a value.
Free tools Windows power users keep installed
One-click scans. No signup required.
Exiger, aDolus, and XSB: supply-chain risk in two deals
Exiger made two separate purchases. aDolus focuses on software-supply-chain risk visibility, software provenance, software bills of materials (SBOMs), and binary analysis. XSB brings logistics intelligence and supply-chain data. Together, the transactions illustrate how cyber-related dealmaking can extend from software integrity to broader supplier and operational risk. The cited roundup did not disclose prices.
Mimecast and Aware: collaboration and human risk
Mimecast acquired Aware to add collaboration security, human-risk management, and compliance capabilities to its platform. The cited roundup did not disclose a purchase price or establish that the transaction closed in August, so it is best described there as an acquisition announcement.
OPSWAT and InQuest: network analysis and threat intelligence
OPSWAT acquired InQuest to strengthen network analysis, threat intelligence, and protection for critical infrastructure. The cited roundup did not disclose the price.
Other transactions in SecurityWeek’s August list
The following table preserves the buyer and target names in the roundup’s additional-deal list. Its brief entries do not establish purchase prices, closing dates, or detailed product descriptions for these transactions; category labels are broad editorial groupings, not claims about a company’s entire business.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
| Buyer | Target | Broad category |
|---|---|---|
| Abaxx | PrivacyCode | Privacy and security technology |
| CloudBees | Launchable | Software delivery and testing |
| CorePLUS Technologies | Cyber Trust Alliance | Cyber risk and services |
| CSE Crosscom USA | RFC Wireless | Communications and IT services |
| CyberGuard Advantage | Control Gap | Cybersecurity services |
| Dataprise | Phoenix IT | Managed IT and security services |
| FOSSA | StackShare | Software supply chain and developer tooling |
| Fulcrum IT Partners | Fortress Security Risk Management | Security risk management |
| GAM Tech | Cyber Tech 360 | Managed IT and cybersecurity services |
| Integrity360 | Grove Group | Cybersecurity services |
| Littlefish | Storm Technology | Managed IT and security services |
| Magnet Forensics | Medex Forensics | Digital forensics |
| Nortal | 3DOT Solutions | Cyber and technology services |
| Parsons | BlackSignal Technologies | Cyber intelligence and defense technology |
| Paltalk | Newtek Technology Solutions | Technology and communications services |
| Scope AI | QSE Technology | AI and security technology |
| Schellman | INSYTE | Compliance and assurance |
| Sixgen | Boldend | Cyber and defense technology |
| Spirit Technologies | Forensic IT | IT and forensic services |
| TAC Security | Cyber Sandia | Cybersecurity services |
| TD SYNNEX | Prolink | Technology distribution and services |
| UFS | Safe Systems | Managed IT and cybersecurity |
| Xantaro Group | NetDescribe | Network and security services |
| Zellic | Code4rena | Blockchain and smart-contract security |
What the deal mix suggests
Established platforms were filling capability gaps
Check Point, Cisco, Fortinet, DigiCert, Mimecast, and OPSWAT each added specialist capabilities that could complement an existing product suite or service portfolio. This pattern is consistent with a buy-versus-build rationale: an established vendor can seek to integrate a narrower technology into a broader platform. It does not, by itself, show that every buyer will successfully integrate a target or that customers will receive every capability as one product.
Rank #4
AI security became a visible acquisition target
Robust Intelligence is the clearest AI-security transaction among the highlighted deals. Its focus was protecting AI models and applications through their lifecycle. That differs from using AI to detect threats in traditional networks: the systems being secured are themselves AI applications and models. The roundup does not establish that AI security dominated all August dealmaking; it shows a notable strategic bet by Cisco.
Data protection, trust, and supply-chain assurance broadened the category
Next DLP reflects demand for controls around sensitive data and insider risk. Vercara connects digital trust to DNS, DDoS, and application availability. Exiger’s aDolus and XSB purchases extend risk management into software provenance and supply-chain intelligence. These are related but distinct capabilities, and their presence helps explain why a cyber M&A tracker may include companies outside a narrow endpoint- or network-security definition.
Services acquisitions make deal counts hard to compare
Many additional transactions involve managed IT, cybersecurity services, compliance, forensics, and consulting. These roll-ups differ economically from buying a software company: revenue models, integration needs, and transaction values may not be comparable. Because most prices in the list are undisclosed and the deal types vary, the count alone cannot show total invested capital, average deal size, or which segment generated the most value.
Announcement and closing are different milestones
For a deal announced in August, the announcement date is not necessarily the signing date, closing date, or date a target’s technology becomes integrated. The verified examples show why status labels matter:
| Transaction | August 2024 position | Later verified status |
|---|---|---|
| Fortinet–Next DLP | Fortinet announced the acquisition August 6. | Fortinet said it had signed and closed as of August 5. |
| Cisco–Robust Intelligence | Cisco announced intent to acquire on August 26. | Cisco announced completion September 24; its current page refers to Robust Intelligence as part of Cisco in October 2024. |
| Check Point–Cyberint | Check Point announced a definitive agreement August 27. | Check Point reported completion September 30. |
| EQT–Acronis | SecurityWeek reported a proposed majority-stake transaction subject to approvals. | The cited roundup expected completion in 2025; it does not establish a closing date. |
How to read the price information
“Undisclosed” means the cited announcement or roundup did not state a purchase price; it does not mean the deal had no value. Check Point’s later filing supplies a disclosed Cyberint consideration figure, while contemporary reporting cited a rough estimate. For most other transactions, the cited sources do not establish a price. An average deal value would therefore be misleading: the sample mixes acquisitions and a majority investment, and many values are unavailable. A Lincoln International report contains a Robust Intelligence figure that appears inconsistent with the transaction as described by Cisco; without resolving that discrepancy, it is not a reliable basis for stating a purchase price. Lincoln International’s report.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
