37 Cybersecurity Deals in One Month: What June 2026's M&A Surge Tells Us
From a $4 billion Accenture mega-deal to a $70 million automated-patching pickup, June was a busy month for security industry consolidation. Here is what moved and why it matters.
Key points
- Thirty-seven cybersecurity merger and acquisition deals were announced in June 2026, continuing a pace that saw more than 420 such deals close in 2025.
- Accenture agreed to buy industrial security firms Dragos, runZero, and NetRise in a combined transaction valued at $4.175 billion.
- 1Password paid between $250 million and $300 million for Israeli access-management startup Apono.
- SailPoint completed its acquisition of Tel Aviv-based Entro Security for roughly $200 million to expand protection of AI agents and machine accounts.
- Cisco's planned purchase of WideField Security marks its third security acquisition of 2026.
Thirty-seven deals in a single month sounds like a lot. It is. June 2026 kept up the blistering pace that SecurityWeek tracked through all of 2025, when buyers snapped up more than 420 security companies in twelve months.
The headline number belongs to Accenture, the global consulting giant. It is buying a majority stake in Dragos, a firm that protects industrial control systems (the computers that run power plants, water treatment facilities, and factories), plus full ownership of runZero and NetRise. Combined price tag: $4.175 billion. The goal is a single platform that gives operators of critical infrastructure a clear picture of what is connected to their networks and a faster way to spot attacks.
Why does this wave of buying matter to ordinary people?
Because the companies being acquired protect systems that ordinary people depend on every day. When industrial security firms, identity platforms, and data-monitoring tools end up under one roof, the quality of their protection either improves through tighter integration or suffers through distraction and culture clash. History suggests both outcomes are possible.
On the identity side, 1Password, best known as the app that remembers your passwords, paid up to $300 million for Apono. Apono specialises in "just-in-time" access, meaning it gives workers or software programs only the access they need, exactly when they need it, and revokes it immediately after. That limits the damage a criminal can do with a stolen password.
SailPoint, which helps large organisations manage who has access to what, completed its purchase of Entro Security for around $200 million. Entro focuses on protecting "non-human identities", the automated accounts and secret keys that software programs use to talk to each other. These are increasingly attractive targets because they often sit unmonitored.
Two deals reflect how worried the industry is about AI systems being misused. A10 Networks bought Canadian firm TrojAI to add AI red-teaming (the practice of attacking your own AI system to find weaknesses before criminals do) to its products. F5 acquired Denver startup SurePath AI, which finds "shadow AI", meaning AI tools that employees use without the company's knowledge or approval.
Belgium-based Aikido Security paid between $70 million and $100 million for Root, an Israeli startup that patches software vulnerabilities automatically without requiring a full version upgrade. Databricks, a data-analytics company building what it calls a "security lakehouse" (a single store for all security-related data), agreed to buy Panther Labs, whose last public valuation in 2021 was $1.4 billion.
For everyday users, the practical takeaway is simple: the tools guarding your bank, hospital, or utility provider are changing hands at speed. That is not inherently dangerous, but it is worth knowing.
