The cybersecurity sector saw the announcement of 39 mergers and acquisitions during September 2026, in a wave involving companies operating in operational technology security, asset discovery, data security, artificial intelligence, and managed security services. The number of deals reflects a clear trend toward consolidating specialized capabilities within broader platforms rather than simply adding separate products to the market.
Key deals in operational technology security
Dragos completed its acquisitions of NetRise and runZero as part of Accenture’s $4.1 billion push into operational technology security, announced in June. NetRise adds firmware-level visibility and information on device exposure and software supply chain risks, while runZero provides asset discovery, exposure assessment, and attack surface intelligence capabilities. According to Dragos, these capabilities will be integrated with its platform’s asset visibility and threat discovery for OT environments.
In Spain, Aiuken Cybersecurity, part of the Allurity Group, acquired 4Elitech, which specializes in the security of industrial environments and critical infrastructure. The deal adds OT threat detection and industrial incident response to Aiuken’s services.
Artificial intelligence enters security deals through multiple channels
Palo Alto Networks acquired Console, an AI-native platform for building agentic workflows using natural language, in a deal that reports said was worth $500 million in cash and shares. The company plans to deepen agent capabilities within the Cortex platform, enabling security teams to automate investigation and remediation.
Kiteworks also acquired data security company Bonfy.AI to expand real-time policy enforcement for sensitive data exchanged by human users and AI agents. In another deal, Upwind acquired Israeli startup Aegis in an all-stock agreement reportedly valued at $30 million. Aegis’s two founders will lead Upwind AI Security Labs, researching ways to defend against AI-powered attacks.
Expansion in security services and consulting
NetSPI and Synack agreed to merge to form an offensive security company with revenue exceeding $200 million. The new entity will combine specialized penetration testers with agentic artificial intelligence for continuous security testing.
IBM acquired UK-based Logiq Consulting, which provides consulting services to the defense, government, and critical infrastructure sectors in the United Kingdom. The deal aims to expand IBM’s capabilities in secure digital transformation and sovereign technologies there. Edinburgh-based Quorum Cyber also agreed to acquire Ontinue, a provider of managed extended detection and response services, in a deal combining AI-powered MXDR, cyber resilience, and human expertise to create a Microsoft ecosystem-focused security operations center.
Why does this matter?
The deals show that competition is not limited to acquiring entire security companies, but also involves adding specific capabilities such as exposure intelligence, software supply chain security, data policy enforcement, and response automation. Customers may benefit from more integrated platforms, but combining these technologies could raise questions about integration, product continuity, and clarity of responsibility when AI capabilities are incorporated into security operations.
The list also included A-LIGN’s acquisitions of AssurePoint and Pathfynder; Pistachio’s acquisition of Hugin.io’s intellectual property to launch a compliance management product in 2027; and Quantum eMotion’s agreement to acquire Plurilock for approximately C$33.8 million in cash and shares. The deals also included S&P Global’s pending acquisition of OpenZeppelin, Surfshark’s acquisition of a majority stake in Optery, and other moves in managed security services and risk management.