33 Cybersecurity Companies Changed Hands in August 2026
From Visa's $2.4 billion grab of fraud-detection firm BioCatch to Munich Re's $575 million bet on cyber insurance, August was a busy month for dealmaking in the security industry.
Key points
- Visa agreed to buy fraud-prevention company BioCatch for $2.4 billion in cash in August 2026.
- German reinsurance company Munich Re agreed to acquire cyber insurer At-Bay for $575 million.
- Datavault AI announced a $94.5 million all-cash deal to buy compliance and encryption firm CyberCatch.
- Palo Alto Networks acquired Console, a platform that lets security teams give instructions in plain language to automate security tasks.
- A total of 33 cybersecurity mergers and acquisitions were announced in August 2026, according to SecurityWeek.
The cybersecurity industry spent August writing large cheques. Thirty-three deals were announced, ranging from multibillion-dollar acquisitions by payments and insurance giants to small asset purchases following startup failures.
Who spent the most money, and why?
Visa leads by a wide margin. The payments company agreed to pay $2.4 billion in cash for BioCatch, whose software watches how you move through a banking app to detect fraud. That analysis, called behavioural intelligence, flags criminals who steal a password but still navigate a banking app differently from the real account holder. We covered the deal in detail on 3 August. Visa says it will fold BioCatch's tools into its existing fraud and security products.
Munich Re, one of the world's largest reinsurance companies (firms that insure other insurers), agreed to pay $575 million for At-Bay, a California company that sells cyber insurance to businesses and also monitors those businesses for threats. At-Bay will join Munich Re's HSB unit. The deal ties insurance coverage to active security monitoring, a model risk officers have been pushing for years.
Datavault AI announced a $94.5 million all-cash agreement to buy San Diego-based CyberCatch, which helps companies prove they meet government security requirements (called compliance) and uses post-quantum encryption, a type of scrambling designed to resist computers that could break current codes.
What do the other deals tell us about where security is heading?
Several acquisitions point to the same preoccupation: artificial intelligence, and how to make it safer.
Fortinet, a major network security company, bought Virtue AI, which specialises in testing AI systems for weaknesses before criminals find them. Palo Alto Networks picked up Console, a platform that lets analysts describe a task in plain English and have software carry it out automatically. Our earlier story on Palo Alto's AI push noted the company's 34% revenue jump alongside that acquisition. Cribl, which helps companies manage large volumes of security data, bought technology assets from Radiant Security, a San Francisco startup that used AI to sort through security alerts so human analysts aren't overwhelmed.
Identity fraud also drew money. HR and payroll platform Deel acquired Israel-based Clarity for a reported $40 million to $50 million. Clarity's software detects deepfakes, convincing fake videos or images made by AI, during video job interviews, where criminals sometimes impersonate candidates to steal data from inside a company.
| Deal | Buyer | Target | Value |
|---|---|---|---|
| Visa / BioCatch | Visa | BioCatch | $2.4 billion |
| Munich Re / At-Bay | Munich Re (HSB) | At-Bay | $575 million |
| Datavault AI / CyberCatch | Datavault AI | CyberCatch | $94.5 million |
| Deel / Clarity | Deel | Clarity | $40-50 million (reported) |
| Echo / Minimus | Echo | Minimus (assets) | A few million (estimated) |
Should ordinary people care about any of this?
Most of these deals sit inside corporate security infrastructure, so the effect on individuals is indirect but real. Visa improving its fraud detection is the system that blocks an unauthorised charge on your card. Deel adding deepfake detection to hiring tries to stop criminals from infiltrating companies that hold employee payroll data, including yours.
The practical point is this. If you receive any communication claiming a company you do business with has changed ownership and is asking you to verify account details or click a link, treat it as suspicious. Criminals use news of real mergers as cover for phishing, where they send fake emails designed to steal your password. Contact the company directly using a number or website you already know.
The bigger story across these 33 deals is how much capital is chasing AI safety and identity verification right now. Whether buyers can actually integrate what they're paying for is the question worth watching.
