Governance, Risk & Compliance
Cybersecurity governance, risk assessment, compliance monitoring, and regulatory reporting.
Secure&IT
Independent Spanish cybersecurity consultancy combining regulatory compliance advisory (ENS, GDPR, NIS2, DORA) with a managed SOC-CERT and industrial…
Fortreum
A Gryphon-backed cybersecurity advisory firm that added AI-driven FedRAMP and CMMC automation by acquiring Kovr.AI.
Arkenstone Defense
A seed-stage Menlo Park managed platform for the federal compliance burden of selling into government.
Sagenso
Polish SME-focused platform combining ransomware behavior detection (Ransom SpAI) with a cybersecurity compliance-tracking SaaS tool (Telescope).
Koniag Cyber
An Alaska Native Corporation cybersecurity subsidiary that built CMMC capability by acquiring SoundWay Consulting's practice.
Rimstorm
A managed CMMC Level 2 enclave provider for defense contractors, acquired by BOOST LLC in March 2026.
Nuclea
A Brazilian financial-infrastructure operator building fraud and AML capability by acquiring Data Rudder, pending Central Bank approval.
Allgress
Allgress provides an integrated IT governance, risk, and compliance platform that helps organizations map controls, manage risk assessments,…
Tyto Athene
A PE-backed federal IT integrator that built FedRAMP and CMMC compliance depth via MindPoint Group and stackArmor.
InnoSec
STORM platform quantifies cyber risk in business-impact terms for enterprises, insurers, and M&A due diligence, recognized as a…
TruOps
Cloud-based GRC platform from longtime IT/security consultancy SDG Corporation, integrating IT risk, compliance, vendor risk, and vulnerability management…
DeepView
Small UK compliance-archiving and data-leak-detection platform for regulated firms, monitoring WhatsApp, iMessage, and social media under FINRA/SEC/FCA rules.
Montagu
A London private equity firm taking a majority stake in certification body DQS in April 2026.
Verdict Machine
Verdict Machine is an early-stage Tel Aviv startup using AI to assess and pre-approve institutional blockchain transactions against…
CyberNINES
An authorized CMMC C3PAO assessment organization acquired by ControlCase.
Quantum Fort
Swiss cyber risk quantification firm, rebranded from Corax Cyber Security, translating technical exposure into financial risk metrics for…
Synctera
A banking-as-a-service platform that embedded automated AML/KYC control testing by acquiring Cable in April 2026.
ACG Cybersecurity
Paris-based independent cybersecurity consultancy specializing in penetration testing, ISO 27001 implementation, and regulatory compliance audits (GDPR, PCI DSS,…
SafeStack
An Auckland developer secure-coding training specialist acquired by NINJIO in July 2026.
Gryphon Investors
A San Francisco private equity firm whose portfolio company Ncontracts acquired Quantivate to form a 4,000-institution GRC platform.
Stelau
A 24-year-old Paris digital-identity security consultancy acquired by iDAKTO to complete an end-to-end identity value chain.
Andersen
A global professional-services association extending into cyber and privacy advisory through BD Emerson and a collaboration with S-RM.
Capslock
A Manchester cyber-reskilling bootcamp (1,200+ career changers placed) fully absorbed into joint-venture partner mthree.
Datavault AI
A NASDAQ-listed data-tokenization company that diversified into cyber-risk compliance with a $94.5M all-cash CyberCatch acquisition.