33 Cybersecurity Companies Changed Hands in August 2026
From Visa's $2.4 billion grab of fraud-detection firm BioCatch to Munich Re's $575 million bet on cyber insurance, August was a busy month for dealmaking in the security industry.
Key points
- Visa agreed to buy fraud-prevention company BioCatch for $2.4 billion in cash in August 2026.
- German reinsurance company Munich Re agreed to acquire cyber insurer At-Bay for $575 million.
- Datavault AI announced a $94.5 million all-cash deal to buy compliance and encryption firm CyberCatch.
- Palo Alto Networks acquired Console, a platform that lets security teams give instructions in plain language to automate security tasks.
- A total of 33 cybersecurity mergers and acquisitions were announced in August 2026, according to SecurityWeek.
The cybersecurity industry spent August writing large cheques. Thirty-three deals were announced across the month, ranging from multibillion-dollar acquisitions by payments and insurance giants to small, quiet asset purchases following startup failures.
Here are the deals that matter most to ordinary people and the businesses that serve them.
Who spent the most money, and why?
Visa leads the list by a wide margin. The payments company agreed to pay $2.4 billion in cash for BioCatch, a company whose software watches how you move your mouse, type, and hold your phone to detect fraud. That kind of analysis, called behavioural intelligence, flags criminals who steal a password but still move through a banking app differently from the real account holder. Visa says it will fold BioCatch's tools into its existing fraud and security products.
Munich Re, one of the world's largest reinsurance companies (firms that insure other insurers), agreed to pay $575 million for At-Bay, a California company that sells cyber insurance to businesses and also monitors those businesses for threats. The deal ties insurance coverage to active risk management, a model regulators and risk officers have been pushing for years.
Datavault AI announced a $94.5 million all-cash agreement to buy San Diego-based CyberCatch, which helps companies prove they meet government security requirements (called compliance) and uses post-quantum encryption, a type of scrambling designed to resist the next generation of computers that could break current codes.
What do the other deals tell us about where security is heading?
Several acquisitions point to the same preoccupation: artificial intelligence, and how to make it safer.
Fortinet, a major network security company, bought Virtue AI, which specialises in testing AI systems for weaknesses before criminals find them. Palo Alto Networks picked up Console, a platform that lets security analysts describe a task in plain English and have software carry it out automatically. Cribl, which helps companies manage large volumes of security data, bought technology assets from Radiant Security, a startup that used AI to sort through security alerts automatically so human analysts are not overwhelmed.
Identity fraud also drew attention. HR and payroll platform Deel acquired Israel-based Clarity for a reported $40 million to $50 million. Clarity's software detects deepfakes, which are convincing fake videos or images created by AI, during video job interviews, where criminals sometimes impersonate candidates to land jobs at companies and then steal data from the inside.
| Deal | Buyer | Target | Value |
|---|---|---|---|
| Visa / BioCatch | Visa | BioCatch | $2.4 billion |
| Munich Re / At-Bay | Munich Re (HSB) | At-Bay | $575 million |
| Datavault AI / CyberCatch | Datavault AI | CyberCatch | $94.5 million |
| Deel / Clarity | Deel | Clarity | $40-50 million (reported) |
| Echo / Minimus | Echo | Minimus (assets) | A few million (estimated) |
Should ordinary people care about any of this?
Most of these deals happen inside the plumbing of corporate security, so the direct effect on individuals is indirect but real. When Visa improves its fraud detection, that is the system that blocks an unauthorised charge on your card. When a company like Deel adds deepfake detection to hiring, it is trying to stop criminals from infiltrating companies that hold employee payroll data, including yours if you work there.
The practical takeaway is simple. If you receive any communication claiming a company you do business with has changed ownership and is asking you to verify account details or click a link, treat it as suspicious. Criminals use news of real mergers as cover for phishing, where they send fake emails designed to steal your password. Contact the company directly using a number or website you already know.
