39 Cybersecurity M&A Deals Announced in September 2026
Summary
A roundup reports 39 cybersecurity-related M&A deals announced in September 2026, including acquisitions and a merger spanning OT security, data protection, AI security, testing, and managed security services.
Key points
- A-LIGN acquired AssurePoint, adding Australian cloud security assessments, and Pathfynder, which provides penetration testing, red teaming, and incident response.
- Dragos completed its acquisitions of NetRise and runZero, adding firmware and software supply chain visibility, asset discovery, and exposure assessment capabilities.
- Kiteworks acquired AI data security company Bonfy.AI to extend policy enforcement across data exchanged by people and AI agents.
- NetSPI and Synack agreed to merge into an offensive security company combining penetration testers with AI-enabled continuous security testing.
- Palo Alto Networks acquired Console to add agentic workflow capabilities for security investigations and remediation to Cortex.
- Quorum Cyber agreed to acquire MXDR provider Ontinue, while Upwind acquired AI security startup Aegis.
- The roundup lists 39 announced deals in total, including acquisitions involving IBM, Aiuken Cybersecurity, and Quantum eMotion.
Article Details
- Event Type
- Cybersecurity mergers and acquisitions announced in September 2026, including completed acquisitions, agreed acquisitions, and a proposed merger.
- Impact
- The announced deals consolidate cybersecurity businesses and capabilities across areas including cloud and industrial security, penetration testing, incident response, asset discovery, AI security, and managed detection and response. The article reports 39 deals but does not describe a direct security incident or customer impact.
Products
Countries
AustraliaThe deal adds IRAP assessments to A-LIGN’s portfolio and marks its entry into Australia.CanadaBoth companies are based in Canada. The deal gives QeM an established cybersecurity revenue base, customer relationships, and public-sector procurement channels.IsraelNorwaySpainSwitzerlandUnited KingdomUnited States
Industries
Critical infrastructureSpanish managed security provider Aiuken Cybersecurity, part of the Allurity group, has acquired 4Elitech, a Spanish specialist in industrial and critical infrastructure cybersecurity.DefenseIBM has acquired UK-based Logiq Consulting, a cybersecurity consultancy serving the UK defense, government, and critical infrastructure sectors.GovernmentIBM has acquired UK-based Logiq Consulting, a cybersecurity consultancy serving the UK defense, government, and critical infrastructure sectors.