Thirty cybersecurity-related merger and acquisition (M&A) deals were announced in December 2025.
SecurityWeek has cataloged more than 420 M&A deals in 2025. A detailed report will be published in the coming weeks.
Eight acquisitions involving pure-play cybersecurity firms exceeded $1 billion.
Here are some of the most important cybersecurity M&A deals announced in December 2025:
Cloud and security company Akamai has acquired serverless cloud provider Fermyon. Fermyon’s WebAssembly (Wasm) function-as-a-service is being combined with Akamai’s platform to enable enterprises to build edge-native applications with better performance and lower costs. Akamai also plans to deepen the integration between the edge functions platform and its performance and security products.
Application security firm Checkmarx has acquired Tromzo, a company specializing in AI-native autonomous security agents. Tromzo’s technology and engineering team will enhance the Checkmarx One platform and expand Checkmarx Assist AI agents. Tromzo founders and employees will join Checkmarx’s product and engineering organization.
Integrity360 acquires Cresco and Redshift
Integrity360, an Ireland-based cybersecurity firm with a presence in Europe and Africa, announced two acquisitions in December. It bought South Africa-based Redshift, which specializes in penetration testing, to strengthen its presence in South Africa and expand its SOC capabilities. It also announced buying Cresco, a cybersecurity services consultancy that serves organizations in Belgium and Luxembourg.
Outpost24 acquires Infinipoint
Swedish exposure management and identity security firm Outpost24 announced the acquisition of Infinipoint, a company providing device identity, posture validation, and secure workforce access solutions. The deal marks Outpost24’s entry into the zero trust workforce access market, and enables the company to enhance its identity security capabilities.
Red Hat acquires Chatterbox Labs
Red Hat has acquired AI security and safety company Chatterbox Labs. Red Hat said the acquisition enables it to add safety testing and guardrails to its AI. Red Hat’s MLOps capabilities will be combined with Chatterbox’s guardrail capabilities.
ServiceNow to acquire Armis and Veza
ServiceNow is acquiring Armis, a company specializing in solutions for discovering IT, OT, and IoT assets, in a $7.75 billion cash deal. ServiceNow is also buying identity security firm Veza, reportedly for $1 billion. The goal is to extend the capabilities of its security and risk portfolios.
Threat intelligence company Silent Push has acquired HYAS, a Canada-based firm specializing in proactive threat intelligence and protective DNS solutions. The deal enables Silent Push to enhance its capabilities and expand its customer base. HYAS leadership and employees will join Silent Push, and the company will operate under the Silent Push brand.
Other cybersecurity M&A deals announced in December 2025:
Aretum acquires Veterans Engineering
Bastion merges with Phronesis Security
Broadwing Capital acquires CloudScale365
BTQ acquires PQC IP through Keypair investment
Harbor IT acquires ZAG Technical
Infinum acquires AMR CyberSecurity
itSynergy acquires Comply’s Itegria Business
Limerston Capital acquires Aristi
MetaCompliance acquires Junglemap
Northern Telecom acquires C-STEM
Synergy ECP acquires NetServices
Woven Solutions acquires Cystemic Security
TRM acquires Sheffield Scientific
Related: Cybersecurity M&A Roundup: 30 Deals Announced in November 2025
Related: Cybersecurity M&A Roundup: 45 Deals Announced in October 2025
