Cybersecurity · Industry brief

(empty string)

The 40 leading cybersecurity vendors tracked by Canalys announced 25 acquisitions in 2024, down from 29 in 2023, with combined spending of $5.4 billion. Deal value fell 83% year-over-year, though excluding Cisco's $28 billion Splunk acquisition from 2023, deal value increased 36%. CyberArk's $1.5 billion acquisition of Venafi was the largest in 2024, while attack surface management and data security were key investment themes. Fortinet and Mimecast were most active with three deals each, while Palo Alto Networks has made 14 acquisitions since 2019. In 2025, cybersecurity M&A accelerated significantly with 29 deals announced year-to-date totaling an estimated $61.1 billion in combined value. Google Cloud's proposed $32 billion acquisition of Wiz in Q1 and Palo Alto Networks' $25 billion proposed takeover of CyberArk dominated activity. Excluding these two mega-deals, 27 transactions totaled $5.1 billion, with 16 valued at $100 million or more. Q2 2025 saw 10 major deals including Proofpoint's $1 billion purchase of Hornetsecurity, Zscaler's $675 million acquisition of Red Canary, and Palo Alto Networks' $650 million deal for Protect AI. AI-focused security M&A accelerated with nearly $1 billion spent on early-stage vendors addressing LLM and agentic AI threats. The cybersecurity industry is transitioning from the "scale" stage to the "focus" stage of consolidation, with mega-deals becoming increasingly common as top players including Palo Alto, Cisco, CrowdStrike, Zscaler, Cloudflare, Okta, and Fortinet consolidate market share. Accenture spent $4.2 billion acquiring Dragos, runZero, and NetRise to build infrastructure and operational technology security capabilities, signaling consulting firms' strategic entry into cybersecurity platform ownership. Industry sources project the market will reach its final consolidation stage within 7-10 years, where top three companies may control 70-90% of the market.

Palo Alto Networks is acquiring CyberArk for $25 billion, marking one of the largest cybersecurity M&A deals ever and signaling major industry consolidation. The deal positions identity security as a critical pillar alongside network and endpoint protection, with CyberArk's privileged access management (PAM) capabilities adding to Palo Alto's platform. Analysts note synergies will come from cross-selling to Palo Alto's 85,000-customer base versus CyberArk's 8,000 customers, with expected post-deal free cash flow guidance of 40% or higher. The acquisition reflects broader consolidation trends, with Palo Alto also acquiring Chronosphere for $3.35 billion to compete in cloud-native observability, expanding beyond traditional CISO budgets into CIO and CTO wallet share alongside competitors like Datadog and New Relic.