Cybersecurity M&A Roundup: 40 Deals Announced in September 2025

Forty cybersecurity merger and acquisition deals were announced in September 2025, according to SecurityWeek. Significant highlights include Accenture acquiring IAMConcepts to expand its identity and access management footprint in Canada, and Cato Networks acquiring Aim Security in what is described as the first-ever acquisition for Cato. Check Point Software Technologies announced plans to acquire Lakera, while CrowdStrike disclosed plans to acquire Pangea to enhance its AI protections within the Falcon platform.

DigiCert acquired Valimail, and F5 agreed to acquire CalypsoAI for $180 million. Mitsubishi Electric announced an agreement to acquire Nozomi Networks for nearly $1 billion, with Nozomi continuing to operate independently. SecurityScorecard announced the acquisition of HyperComply, and SentinelOne unveiled plans to buy Observo AI to boost its SIEM and data offerings, while Varonis Systems acquired SlashNext for $150 million.