A September to Remember for Cybersecurity M&A Deals, with 39 Transactions Announced
September 2026 proved to be an exceptionally busy month for the cybersecurity industry, with no less than 39 merger and acquisition (M&A) deals announced. This flurry of activity reflects a growing recognition among companies that investing in cybersecurity is essential for long-term success in today’s increasingly digital landscape.
At the forefront of these deals are several major players, including A-LIGN, which acquired two companies: AssurePoint, a cloud security assessment firm based in Sydney, and Pathfynder, a penetration testing and incident response services provider. The acquisition marks A-LIGN’s entry into Australia and adds IRAP assessments to its portfolio. Aiuken Cybersecurity, part of the Allurity group, also made headlines by acquiring 4Elitech, a specialist in industrial and critical infrastructure cybersecurity.
Dragos was another major player in September’s M&A landscape, having completed its acquisitions of NetRise and runZero as part of Accenture’s $4.1 billion OT cybersecurity push announced earlier this year. The deal adds exposure management and software supply chain security to Dragos’ platform, alongside existing OT asset visibility and threat detection capabilities.
IBM also made a significant move by acquiring UK-based Logiq Consulting, which serves the UK defense, government, and critical infrastructure sectors. This acquisition expands IBM’s secure digital transformation and sovereign technology capabilities in the UK. Meanwhile, Kiteworks acquired AI data security company Bonfy.AI, extending its policy enforcement capabilities across both human users and AI agents.
In a move that combines expertise with innovative technology, NetSPI and Synack agreed to merge, creating an offensive security company with over $200 million in revenue. The combined entity will pair expert penetration testers with agentic AI for continuous security testing.
Palo Alto Networks acquired Console, an AI-native platform for building agentic workflows using natural language, reportedly for $500 million in cash and stock. This deal deepens the company’s agentic capabilities in its Cortex platform, allowing security teams to automate investigation and remediation tasks more efficiently.
As the cybersecurity landscape continues to evolve, it’s essential for companies to remain agile and adapt to emerging threats. One practical takeaway from these M&A deals is that investing in AI-powered technologies can be a game-changer for businesses looking to stay ahead of the curve. Whether through acquisitions or internal development, integrating agentic capabilities into security platforms can significantly enhance incident response times and reduce the risk of human error.
Ultimately, the pace of M&A activity in September 2026 underscores the importance of cybersecurity in today’s digital world. As companies continue to invest in this space, we can expect to see even more innovative technologies emerge that will shape the future of security and beyond.
Source: SecurityWeek — 2026-10-06