37 Cybersecurity Deals in One Month: What June 2026's M&A Surge Tells Us
From a $4 billion Accenture mega-deal to a $70 million automated-patching pickup, June was a busy month for security industry consolidation. Here is what moved and why it matters.
Key points
- Thirty-seven cybersecurity merger and acquisition deals were announced in June 2026, continuing a pace that saw more than 420 such deals close in 2025.
- Accenture agreed to buy a majority stake in Dragos and full ownership of runZero and NetRise in a combined transaction valued at $4.175 billion.
- 1Password paid between $250 million and $300 million for Israeli access-management startup Apono.
- SailPoint completed its purchase of Tel Aviv-based Entro Security for roughly $200 million to expand protection of AI agents and machine accounts.
- Cisco's planned purchase of WideField Security is its third security acquisition of 2026.
Thirty-seven deals in a single month sounds like a lot. It is. June 2026 kept up the pace that SecurityWeek tracked through all of 2025, when buyers acquired more than 420 security companies across twelve months.
The headline number belongs to Accenture. We covered the deal on 18 June in "Accenture Moves to Acquire Dragos, runZero, and NetRise in $4.1 Billion OT Security Consolidation": Dragos alone is valued at $3.25 billion, with runZero and NetRise folding under the Dragos umbrella after closing. The combined goal is a platform giving critical infrastructure operators clearer visibility into what's connected to their networks and a faster path to spotting attacks.
Why does this wave of buying matter to ordinary people?
Because the companies being acquired protect systems that people depend on every day. When industrial security firms and identity platforms end up under one roof, the quality of their protection either improves through tighter integration or suffers through distraction and culture clash. History suggests both outcomes are possible.
On the identity side, 1Password, best known as the app that remembers your passwords, paid up to $300 million for Apono. Apono specialises in "just-in-time" access, giving workers or software programs only the access they need, exactly when they need it, then revoking it immediately after. That limits the damage a criminal can do with a stolen credential.
SailPoint, which helps large organisations manage who has access to what, wrapped up its Entro Security deal for around $200 million. As our earlier story on 18 June noted, Entro fills a gap that's become increasingly hard to ignore: the automated accounts and secret keys that software programs use to talk to each other, which often sit completely unmonitored.
Two deals reflect the industry's anxiety about AI misuse. A10 Networks bought Canadian firm TrojAI to add AI red-teaming (attacking your own AI system to find weaknesses before criminals do) to its products. F5 acquired Denver startup SurePath AI, which detects "shadow AI", meaning AI tools employees use without their employer's knowledge or approval.
Belgium-based Aikido Security paid between $70 million and $100 million for Root, an Israeli startup whose technology patches software vulnerabilities without forcing a full version upgrade. Databricks, building what it calls a "security lakehouse" (a single store for all security-related data), agreed to buy Panther Labs, last publicly valued at $1.4 billion in 2021.
Should you worry?
Not immediately. The tools guarding your bank or utility provider are changing hands fast, and that's worth watching. Consolidation at this speed tends to favour large vendors with integration budgets, and it quietly squeezes the smaller specialists who often do the sharpest work.
