Governance, Risk & Compliance
Cybersecurity governance, risk assessment, compliance monitoring, and regulatory reporting.
Gryphon Investors
A San Francisco private equity firm whose portfolio company Ncontracts acquired Quantivate to form a 4,000-institution GRC platform.
Stelau
A 24-year-old Paris digital-identity security consultancy acquired by iDAKTO to complete an end-to-end identity value chain.
Andersen
A global professional-services association extending into cyber and privacy advisory through BD Emerson and a collaboration with S-RM.
Capslock
A Manchester cyber-reskilling bootcamp (1,200+ career changers placed) fully absorbed into joint-venture partner mthree.
Datavault AI
A NASDAQ-listed data-tokenization company that diversified into cyber-risk compliance with a $94.5M all-cash CyberCatch acquisition.
CyberNut
A K-12-focused security-awareness vendor that added a student digital-citizenship curriculum by acquiring Neptune Navigate in July 2026.
Howden
A global insurance broker that acquired Cybeta's cyber-risk analytics IP in May 2026.
Wipfli
A top-25 US accounting and advisory firm that added infosec and privacy compliance by acquiring CompliancePoint in 2026.
Magnitude
A seed-stage San Francisco autonomous third-party-risk platform backed by Ballistic Ventures.
mhm
A five-year-old Calgary assurance firm and ISO 42001 accreditation pioneer acquired by Axiom GRC.
RealSecurity
REAL Security (trading as RealSecurity) is a specialist cybersecurity distributor and consultancy based in Maribor, Slovenia, serving the…
Hard2Hack
A bootstrapped fractional-CISO practice led by a 35-year cybersecurity veteran.
SoundWay Consulting
A Cyber AB-authorized CMMC C3PAO whose CMMC business line was acquired by Koniag Cyber in March 2026.
Cyberangels
A Milan-based white-label cybersecurity platform bundling risk assessment, threat monitoring, compliance tracking, and embedded cyber insurance for SMEs…
Lovell Consulting
A five-year-old Paris GRC and IAM consultancy (EUR 4.2M revenue) acquired by cybersecurity group Squad.
CompliancePoint
A 25-year-old Georgia compliance and privacy advisory firm being absorbed into Wipfli.
ImagineX Cybersecurity
ImagineX's Atlanta cybersecurity advisory arm, carved out and acquired by TekStream.
mthree
A workforce-training company that took full ownership of cyber-reskilling provider CAPSLOCK in June 2026.
Security Centric
A Sydney cybersecurity consultancy with defence heritage, acquired by Virtual IT Group.
Catalyst Cyber
A Canberra federal-government cyber-assurance specialist acquired by ASX-listed Infotrust for about AUD 5M in March 2026.
The Collective
The Collective is a Belgian cybersecurity consultancy based in Lochristi, specializing in Microsoft security services — including Microsoft…
CRACI
Helsinki pre-seed startup automating EU Cyber Resilience Act compliance and software-supply-chain documentation inside CI/CD pipelines.
4A Security & Compliance
A boutique U.S. cybersecurity and compliance consultancy offering risk assessments, penetration testing, and vCISO services to regulated organizations,…
Fifth Gear Technology Concepts
A healthcare- and legal-focused MSP and cybersecurity firm acquired by Mobile Mentor.