Listen to this Post
In February 2025, the cybersecurity mergers and acquisitions (M&A) market remained vibrant, continuing the momentum seen in January. The month witnessed several major deals, with significant focus on cloud security, API security, and identity access management. Leading cybersecurity firms such as Sophos and SolarWinds completed high-profile acquisitions, reinforcing their positions in an ever-evolving industry. This article provides a detailed roundup of the M&As that shaped the cybersecurity landscape in February.
Key Cybersecurity M&A Activity in February 2025
1. Sophos Acquires Secureworks for $859M
On February 3, Sophos finalized its acquisition of Secureworks for $859 million. The deal, initially announced in October 2024, positions Sophos to enhance its managed security services by integrating Secureworks’ threat intelligence and security operations capabilities. The acquisition follows a period of restructuring at Secureworks, which laid off 15% of its staff in 2023.
2. SolarWinds Becomes Private in $4.4B Deal
On February 7, SolarWinds announced its acquisition by Turn/River Capital for a total enterprise value of $4.4 billion. The deal makes SolarWinds a privately held company, though it will continue to operate under its brand from its Austin, Texas headquarters.
3. Nozomi Networks Merges with XONA Systems
On February 10, Nozomi Networks, known for its operational technology (OT) security solutions, merged with XONA Systems, which specializes in secure remote access for industrial environments. The merger aims to offer more robust security for industrial control systems, blending Nozomi’s threat detection technology with XONA’s remote access solutions.
4. Harness Merges with Traceable for API Security
Also on February 10, Harness, a software delivery platform, merged with Traceable, an API security company. This partnership strengthens Harness’s position in the API security market by incorporating Traceable’s API discovery capabilities into its platform.
5. Drata Acquires SafeBase for $250M
On February 11, Drata, a compliance automation platform, acquired SafeBase for $250 million. This acquisition helps Drata streamline third-party security assessments by integrating SafeBase’s platform, which helps organizations present their security posture effectively.
6. A10 Networks Acquires ThreatX
On February 12, A10 Networks, a leader in application delivery and security solutions, acquired ThreatX, an advanced web application and API security provider. The acquisition enhances A10’s capabilities in threat detection and mitigation, crucial for defending against web-based attacks.
7. CyberArk Acquires Zilla Security for $175M
On February 13, CyberArk, an identity security provider, completed the acquisition of Zilla Security for $175 million. The deal enhances CyberArk’s identity access management portfolio by adding Zilla’s platform for governance and management of user access privileges.
8. Deepwatch Expands Cloud Security with Dassana
On February 18, Deepwatch, a managed security services provider, acquired Dassana, a cloud security and data aggregation platform. This acquisition strengthens Deepwatch’s offerings by enhancing its cloud security operations with Dassana’s advanced data analytics capabilities.
9. Menlo Security Acquires Votiro for $37.5M
On February 19, Menlo Security, which specializes in secure enterprise browsers, acquired Votiro, an anti-malware platform. This deal, valued at $37.5 million, bolsters Menlo Security’s platform with Votiro’s advanced content disarm and reconstruction (CDR) technology to protect against file-based threats.
What Undercode Says:
The cybersecurity M&A activity in February 2025 is indicative of a broader trend in the industry towards consolidation, particularly in the areas of cloud security, API protection, and identity management. As more organizations embrace digital transformation, the demand for robust security solutions has surged, and these acquisitions reflect companies’ strategies to stay competitive in a fast-moving market.
One of the key trends is the growing importance of managed security services. Sophos’s acquisition of Secureworks, for instance, is an effort to enhance its capabilities in offering comprehensive security solutions. By integrating Secureworks’ threat intelligence with its own products, Sophos not only bolsters its portfolio but also strengthens its position in the increasingly important market for managed security services.
Similarly, A10 Networks’ acquisition of ThreatX highlights the increasing emphasis on web application and API security. With more applications being built on APIs, the need for specialized protection against API-based attacks has become crucial. The acquisition of ThreatX aligns with the growing demand for advanced threat detection and mitigation solutions, which are essential for safeguarding digital infrastructures.
On the other hand, the merger between Nozomi Networks and XONA Systems underscores the importance of securing industrial control systems (ICS). As industries become more connected, the security of operational technology (OT) and ICS has become a top priority. This deal marks a strategic move by Nozomi to integrate secure remote access technology into its existing OT security offerings, providing a more comprehensive solution for protecting critical infrastructure.
Another notable deal is Drata’s acquisition of SafeBase, which signifies the increasing need for compliance automation and third-party security assessments. The deal positions Drata as a leader in the compliance automation space, streamlining the process for businesses to showcase their security posture to clients and regulators. The integration of SafeBase’s platform will likely give Drata a competitive edge, especially as more companies focus on meeting stringent security and compliance standards.
It’s also important to note the shift towards private ownership in some acquisitions. The $4.4 billion acquisition of SolarWinds by Turn/River Capital reflects this trend, as private firms look to capitalize on the growth opportunities in the cybersecurity sector without the pressures of being a publicly traded company. This shift allows firms to take a more long-term approach to growth and development, focusing on innovation rather than short-term stock performance.
Overall, these strategic acquisitions point to an evolving cybersecurity landscape, where companies are expanding their portfolios and capabilities to meet the increasing demand for comprehensive, integrated, and scalable security solutions. As cyber threats grow in sophistication, cybersecurity firms are making significant investments to stay ahead of the curve and offer a diverse range of solutions to their customers.
Fact Checker Results:
- Sophos’s $859M acquisition of Secureworks is confirmed and part of its strategic push for managed security services.
- SolarWinds’s transition to private ownership for $4.4 billion is complete, retaining its brand and operations in Texas.
- The merger between Nozomi Networks and XONA Systems strengthens industrial security through enhanced remote access and OT solutions.
References:
Reported By: https://www.infosecurity-magazine.com/news/cybersecurity-ma-roundup-february/
Extra Source Hub:
https://www.instagram.com
Wikipedia: https://www.wikipedia.org
Undercode AI
Image Source:
OpenAI: https://craiyon.com
Undercode AI DI v2
