Cybersecurity · Industry brief

Cybersecurity startups raised $6.8 billion globally in Q3 2026, a 50% increase from Q2, with AI-focused companies dominating activity. Eighteen firms at the AI-cybersecurity intersection secured rounds of $100 million or more, led by Keyfactor's $1 billion growth round, Island's $400 million, and Cyera's $400 million financing. Acquisitions accelerated with Visa purchasing a security firm for $2.4 billion and Cyera closing a roughly $1 billion deal. The consolidation trend indicates larger players will continue attracting the biggest capital checks over the next twelve months, while smaller teams without strong AI capabilities face pressure to form partnerships or adapt quickly.

Cybersecurity M&A and consolidation accelerated in Q3 2026, with Visa acquiring BioCatch for $2.4 billion and Cyera acquiring Oasis Security for approximately $1 billion. Despite venture funding reaching $6.8 billion—a 50% increase quarter-over-quarter—deal counts fell at every funding stage, concentrating capital among fewer companies and signaling consolidation outpacing new company formation. Aura's reverse-merger listing with Qoria marked the only sizable venture-backed public debut, underscoring how exit-starved the security sector remains outside M&A. AI-driven identity security dominated funding concentration, with at least 18 rounds exceeding $100 million closing in the quarter. Keyfactor led with a $1 billion growth round from Summit Partners, Island raised $400 million at a $6.4 billion valuation, and Cyera added $400 million from Goldman Sachs at a $12 billion valuation—three months after a prior $600 million raise.

The network security market was valued at USD 29.50 billion in 2025 and is projected to reach USD 85.60 billion by 2035, expanding at a 10.99% CAGR. Palo Alto Networks leads with 15.49% market share, followed by Fortinet (14.81%), Cisco Systems (10.51%), Check Point Software Technologies, and Zscaler, which collectively held 55.02% of market revenue in 2025. The market is consolidating around integrated platforms combining prevention, detection, and managed operations rather than discrete products, with cloud deployment growing at 16.02% CAGR while on-premises share declines from 42% to projected 20% by 2035. Regulatory compliance mandates are becoming a primary procurement driver, particularly the EU NIS2 Directive with penalties up to USD 11.2 million for non-compliance, creating structured demand cycles across critical infrastructure sectors. Organizations are shifting capital from appliance refresh cycles toward behavioral analytics, zero trust network access, and AI-assisted threat detection as AI-augmented adversarial tools erode signature-based defenses. Google completed its acquisition of Wiz on March 11, 2026, integrating cloud-native application protection into Google Cloud's security portfolio, while IonQ announced its acquisition of Elisity on October 12, 2026, combining zero trust network access with post-quantum security capabilities.

Link11 has been included as a notable vendor in Forrester's "The Web Application Protection Platforms Landscape, Q3 2026" report, which categorizes vendors in the web application protection platforms market by geographic focus, industry focus, deployment model, and vendor size. The company's cloud-based WAAP platform combines web application firewall, API security, web DDoS protection, and bot management capabilities, with a specific focus on AI traffic management and protecting intellectual property from uncontrolled AI access (Forrester, October 2026).