Cybersecurity M&A Trends: AI and Data Security Drive October Deals

Thirty-seven cybersecurity merger and acquisition (M&A) deals were announced in October 2026, signalling a market pivot toward AI-integrated security, quantum-ready identity management, and consolidated data protection platforms.

AI Security and Automated Defence Take Centre Stage

Artificial intelligence is increasingly driving market consolidation. Anthropic has agreed to acquire Opaque Systems, a company specialising in confidential AI, to bolster its research and engineering capabilities. The deal involves licensing Opaque’s technology and hiring key engineers, including its CEO and CTO.

Similarly, Canadian AI developer Cohere is establishing a dedicated security unit, Cohere Cyber, following its letter of intent to acquire AISLE. The startup uses autonomous AI to identify and patch software vulnerabilities in critical systems. AISLE’s leadership, including former Avast CEO Ondřej Vlček, will join the new unit.

In the field of software analysis, Hex-Rays—the developer of the IDA Pro reverse engineering tool—has agreed to acquire Israeli startup HexAI. The deal is estimated to be worth between $30 million and $35 million. Hex-Rays intends to use HexAI’s AI agents to analyse source code and binaries for malware, backdoors, and vulnerabilities.

Large-Scale Consolidations in Data and Identity

The month was also defined by significant transactions aimed at unifying security stacks. Proofpoint, owned by Thoma Bravo, has agreed to acquire data security provider Varonis for approximately $6.3 billion in cash. The merger is designed to provide a single platform for sensitive data discovery, access control, and loss prevention as organisations increasingly adopt AI.

In a move connecting quantum computing with traditional security, IonQ has agreed to acquire zero trust security firm Elisity in an all-stock transaction valued at up to $1.3 billion. The deal combines IonQ’s post-quantum cryptography with Elisity’s IdentityGraph platform to enforce least-privilege access across users, devices, workloads, and AI agents.

Firmware and Workforce Security Moves

Other notable transactions include Absolute Security’s acquisition of FirmGuard, which will integrate UEFI BIOS firmware security and continuous integrity monitoring into its existing management technology.

Additionally, Belgian application security firm Aikido Security has expanded into workforce security through the acquisition of OutKept and Cyberly. The firm has used these acquisitions to launch Noon, a new business focused on phishing simulations and tracking employee AI usage.