21 Cybersecurity Companies Changed Hands in July 2026
From a billion-dollar identity security deal to a bank buying a British consultancy, July was a busy month for cybersecurity acquisitions. Here is what each deal means in plain English.
Key points
- Twenty-one cybersecurity mergers and acquisitions were announced in July 2026, according to SecurityWeek.
- Cyera agreed to acquire Israeli startup Oasis Security in a deal valued at roughly $1 billion.
- CrowdStrike is buying the patents and source code of XM Cyber, a company the seller originally purchased for $700 million in 2021.
- Okta signed an agreement to acquire identity-threat detection firm Permiso Security for approximately $200 million.
- Qualcomm acquired IoT security startup SAM Seamless Network for a reported sum exceeding $100 million.
July 2026 brought 21 confirmed deals in the cybersecurity sector. Some were quiet roll-ups. A few were genuinely interesting. Below is a plain-English breakdown of the ones that matter most.
What were the biggest deals?
The standout transaction by dollar value is Cyera's agreement to buy Oasis Security for around $1 billion. Cyera specialises in data security, meaning it helps companies track where sensitive information lives and who can reach it. Oasis handles what the industry calls non-human identity governance, which is a fancy way of saying it manages the digital credentials that software bots, AI agents, and automated services use to log into systems. Combining the two means a single platform can watch over both human employees and the automated tools that increasingly do work on their behalf.
CrowdStrike, the large American security firm, is acquiring the patents and source code belonging to XM Cyber, an Israeli company that maps out the routes an attacker could take through a corporate network. The seller is Schwarz Group, the German retail giant that owns Lidl and Kaufland and paid $700 million for XM Cyber back in 2021. The price CrowdStrike is paying has not been disclosed.
Okta, a company that handles logins and identity verification for businesses, agreed to buy Permiso Security for roughly $200 million. Permiso specialises in detecting when someone, or something, is misusing a digital identity inside a cloud environment. That includes human accounts, machine accounts, and autonomous AI systems acting on a company's behalf.
What else happened?
Several other deals are worth a quick note.
| Deal | What the buyer gains |
|---|---|
| Barracuda acquires Evo Security | Better identity management tools for IT service providers |
| Cribl acquires CardinalOps | Automated security-alert detection for corporate security teams |
| Infoblox acquires Kentik | Real-time network traffic visibility layered onto existing DNS tools |
| Qualcomm acquires SAM Seamless Network | Network security baked into wireless chips used by AT&T and Verizon customers |
| Palo Alto Networks acquires Embrace | Mobile app monitoring added to its security platform |
| Bank of America acquires MDSec | Around 65 UK security consultants, expanding the bank's in-house expertise in northern England |
The Qualcomm deal deserves a sentence of its own. SAM Seamless Network makes software that protects internet-connected devices, from smart thermostats to home routers, collectively called IoT (Internet of Things) devices. Embedding that software directly into Qualcomm's wireless chips means security arrives pre-installed on devices before they even reach a customer's hands.
Should ordinary people care?
Most of these deals will not change anything you experience directly, at least not soon. What they do signal is where the industry thinks the next big problems are: AI agents acting autonomously, automated software accounts that can be stolen just like human passwords, and connected devices that ship with weak or no security built in.
If you use Okta to log into work systems, know that your employer's identity tools are likely to gain better threat-detection features over the coming year. If you own a router or smart home device that runs on Qualcomm chips, future models may come with security protections that today require a separate subscription.
The wave of consolidation also means fewer independent vendors, which concentrates security decisions inside a smaller number of large platforms. Whether that is good or bad depends entirely on how well those platforms are maintained.
Common questions
Does any of this affect my personal data?
Not directly. These are business-to-business transactions involving tools that companies use internally. No customer data is reported to have changed hands as part of any July deal.
Why do banks buy cybersecurity firms?
Large banks face constant attack and face heavy regulatory requirements to protect customer data. Buying a consultancy like MDSec brings specialist skills in-house rather than paying an outside firm by the hour.
What is an identity threat, and why does everyone seem to be buying firms that fight them?
An identity threat is when a criminal steals or fakes the credentials, meaning usernames, passwords, or digital certificates, that a person or a piece of software uses to prove who it is. As more work is done by automated systems and AI tools, there are more credentials to steal, which is exactly why Okta, Cyera, and Barracuda all made identity-related acquisitions this month.
