Cybersecurity M&A Roundup: 42 Deals Announced in February 2026
Significant cybersecurity M&A deals announced by Check Point, Booz Allen, Proofpoint, Sophos, Palo Alto Networks, and Zscaler.
Aggregated from SecurityWeek
This article was automatically aggregated from an external source. Content may be summarized.
Full Analysis
Forty-two cybersecurity-related merger and acquisition (M&A) deals were announced in February 2026.
For a detailed view of the more than 420 acquisitions announced in 2025, check out SecurityWeek’s annual M&A report.
Here are some of the most important cybersecurity M&A deals announced in February 2026:
Arctic Wolf acquires Sevco Security
SOC provider Arctic Wolf acquired US cybersecurity company Sevco Security, with no financial details disclosed. The acquisition aims to enhance Arctic Wolf’s attack surface management capabilities and provide customers with more comprehensive visibility and risk reduction in managed security operations.
Booz Allen to acquire Defy Security
Advertisement. Scroll to continue reading.
Technology consulting giant Booz Allen Hamilton acquired cybersecurity services and consulting firm Defy Security. The acquisition aims to expand Booz Allen’s cybersecurity capabilities, as well as support its growing business in the UK and the European Union.
Check Point acquiring Cyata, Cyclops Security, and Rotate
Check Point announced three strategic acquisitions to accelerate its push into AI-driven security and exposure management: Cyata, Cyclops, and Rotate. Cyata will help Check Point enhance its end-to-end AI security platform, while Cyclops helps the company strengthen exposure management with AI-driven asset discovery. Rotate brings talent and capabilities to accelerate workspace momentum.
Endor Labs acquires Autonomous Plane
Software security company Endor Labs acquired application security firm Autonomous Plane. The acquisition aims to enhance Endor Labs’ reachability capabilities across applications and container images.
Experian has acquired identity and data intelligence solutions provider AtData. The acquisition aims to strengthen Experian’s capabilities in identity verification and fraud detection, with a focus on email.
Palo Alto Networks to acquire Koi
Palo Alto Networks has entered into a definitive agreement to acquire endpoint security company Koi. Financial details have not been officially disclosed, but the deal is reportedly valued at $400 million. Palo Alto Networks said it’s buying Koi for its agentic endpoint security technology, aiming to enhance its Prisma AIRS AI security platform and Cortex XDR endpoint security solution.
Proofpoint acquired AI security and governance company Acuvity. The integration of Acuvity’s technology will allow Proofpoint to provide real-time visibility and granular controls over how employees and systems interact with AI applications. This deal aims to prevent the accidental exposure of sensitive data while ensuring compliance.
Quantum eMotion to acquire SKV Technology
Quantum eMotion (QeM) is acquiring SKV Technology (SecureKey), a developer of specialized cryptographic software and hardware. The deal integrates SecureKey solutions into QeM’s portfolio to deliver quantum-resistant security, rapid PQC migration, and policy-driven P2P communication.
Sophos has acquired UK-based Arco Cyber, a cybersecurity assurance company that helps organizations improve their security posture. Sophos said the acquisition enables it to deliver AI-powered cybersecurity governance capabilities, through its CISO Advantage offering, to organizations that lack dedicated security leadership.
Data security company Varonis Systems has acquired AllTrue.ai for its AI trust, risk, and security management (TRiSM) solutions. The deal has been valued at $150 million. By integrating AllTrue.ai’s capabilities into its own platform, Varonis will enable customers to monitor and control AI behavior, reduce risks, and maintain and demonstrate compliance.
Zscaler announced that it has acquired browser security firm SquareX for an undisclosed sum. With the technology provided by SquareX, Zscaler will extend security to unmanaged devices, enabling organizations to secure users within their preferred browser without the need for a full agent or the limitations of a separate, third-party browser.
Other cybersecurity M&A deals announced in February 2026:
AEA acquires majority stake in Magna5
Astreya acquires Reliant Information Services
By Light Professional IT Services acquires Dignitas Technologies
Everpure (formerly Pure Storage) acquires 1touch
Future Standard acquires majority stake in Velonex Technologies
Guardsquare acquires Verimatrix XTD
HaystackID Acquires eDiscovery AI
IT Solutions acquires Tech Superpowers
Littlefish Group acquires Stripe OLT
Logicalis US acquires Maple Woods Enterprises
Quantum Leap acquires Veros Technologies
QuickStart acquires IronCircle
RevSpring acquires TrustCommerce
Scale Computing acquires Adaptiv Networks
TransUnion to acquire mobile division of RealNetworks
TruthScan acquires Imagedetector.com
Valiant Solutions acquires Abile Group
Woven Solutions acquires Valence
Related: Zurich Acquires Beazley in $11 Billion Deal to Lead Cyberinsurance
Related: Cybersecurity M&A Roundup: 34 Deals Announced in January 2026
Originally published by SecurityWeek
Original Source
SecurityWeek