THIRTY-NINE cybersecurity-related merger and acquisition deals were announced in September 2026, with the week-by-week activity highlighting continued consolidation across compliance, OT security, incident response and AI-enabled security. Among the more notable moves, A-LIGN acquired AssurePoint in Sydney to add IRAP assessments and enter the Australian market, while also taking on Pathfynder to broaden its penetration testing, red teaming and incident response capabilities.
Aiuken Cybersecurity, part of the Allurity group, bought 4Elitech to strengthen industrial and critical infrastructure protection, including OT threat detection and industrial incident response.
Other high-profile transactions include Dragos completing the acquisitions of NetRise and runZero as part of a broader OT cybersecurity push, and IBM acquiring Logiq Consulting to expand secure digital transformation and sovereign capabilities in the UK.
In the software agent space, Kiteworks acquired Bonfy[.]AI to extend real-time policy enforcement over data exchanged by humans and AI agents, and Palo Alto Networks bought Console, an AI-native platform for agentic workflows, for $500 million in cash to deepen Cortex automation. Additional notable outcomes feature NetSPI merging with Synack to form an offensive security firm with substantial revenue, and Upwind acquiring Israeli AI security startup Aegis to establish an AI security lab.
Other September deals covered a wide range of security services and software providers, underscoring ongoing appetite for asset discovery, policy enforcement, MXDR, AI-enabled security tooling and OT/ICS expertise as firms recalibrate their security architectures for a rapidly evolving threat landscape. 6 October 2026.