SECURITYWEEK’S M&A tracker shows 426 cybersecurity deals announced in 2025, with 334 of them involving pure-play companies and a 5% rise on the 2024 figure. According to SecurityWeek, the US accounted for roughly 67% of global activity, while the UK rebounded to 64 deals in 2025 and remained the planet’s second-largest M&A hub for cybersecurity. Financial disclosures covered 74 deals worth $92.5 billion in total, of which $84 billion related to pure-play firms, aided by Google’s planned $32 billion Wiz acquisition.
The year saw 11 deals surpassing the $1 billion mark, including Palo Alto Networks’ $25 billion purchase of CyberArk, and ServiceNow’s cash deals for Armis ($7.7B) and Veza ($1B), among others. The report also highlights sector shifts, with governance, risk and compliance (GRC) reaching 82 deals, data protection 63, and identity 43, while incident response declined to 25 and private equity deals cooled to 18.