Airbus just inked the deal for Ultra Cyber. Sovereign UK cyber firm, cryptography pros for the MoD. Poof — gone.
Zoom out. Thirty-eight cybersecurity M&A announcements in March 2026 alone. That’s not a market. That’s a stampede. Companies gobbling each other like it’s the last buffet before the lights go out.
And Google’s $32 billion Wiz swallow? Wrapped up that month too. Remember when everyone whispered it was off? Ha. Cash talks.
But here’s the kicker — most of these deals scream AI. Agentic this, autonomous that. Feels like every startup slapped ‘AI’ on their pitch deck and cashed a check.
Take AppViewX snagging Eos. Machine identity meets AI-native controls. They even swapped CEOs — Archit Lohokare steps up. Bold move, or desperation?
AppViewX, a machine identity management provider, acquired Eos, an AI-native identity control platform for AI agents and autonomous workloads, combining AppViewX’s certificate lifecycle management and PKI capabilities with Eos’s agentic governance and privileged access controls.
Sure. Sounds smoothly. Until the AI agents go rogue — then what?
Why the Drone Forensics Rush?
Cellebrite closes on SCG Canada. Handheld forensics for 80+ drone types. Flight logs, videos, cell towers. Spooky.
Law enforcement wet dream. Or privacy nightmare. Drones everywhere now — Amazon deliveries, border patrols, your nosy neighbor. Extracting petabytes? Governments love it. Users? Not so much.
Short para: Creepy.
Infotrust drops AUD $5 million on Catalyst Cyber. Aussie firm cracks federal doors — IRAP, Essential Eight. Performance-linked, smart. But high-barrier markets mean slow wins. Patience required.
Quantum eMotion eyes SKV Technology. Quantum-resilient crypto stack. Up to C$7M earn-outs, $15M royalties. Full-stack dreams. Quantum threats loom — NIST’s post-quantum push ain’t hype. This one’s got legs.
But Rapid7 buying Kenzo? Agentic AI for SOCs. Autonomous investigations. MDR goes full AI. Reduces grunt work, sure. Scales attacks on attackers. Noble. Yet — SOC teams hate change. Black swan events laugh at autonomy.
Databricks? Double dip: Antimatter and SiftD.ai. Fuels Lakewatch SIEM. Berkeley brains on auth, Splunk vets on search. Big data meets threats. Impressive pedigree. Still, SIEMs are dinosaurs. Will AI resurrect ‘em?
OpenAI grabs Promptfoo. LLM testers, adversarial sims. Integrates into Frontier. Ironic — the AI overlord buying tools to test itself. Self-preservation, or just smart housekeeping?
Fasoo and Konsilix merge into Symbologic. Data sec plus conversational AI. Enterprise AI risks? They say solved. Mid-market too. Ambitious. Data-in-place sounds safe — until a leak proves otherwise.
Soxton AI swallows Cipher Technologies. Legal tech gets agentic shields. Startups need this? Maybe. But law firms with AI? Recipe for hallucinated contracts. Hilarious disasters ahead.
Is AI Security M&A All Smoke?
Look. AI buzzwords everywhere. Agentic. Autonomous. Governance. Every deal name-drops it. But strip the gloss — core tech’s often PKI tweaks, drone decoders, quantum crypto. Solid. Boringly so.
My hot take? This mirrors 2000 telecom M&A madness. Carriers bought towers like candy, debt piled up, dot-bomb. Cybersecurity’s consolidating fast — 420+ deals in 2025 per SecurityWeek. Prediction: By 2028, top 5 vendors own 70%. Innovation starves. Monopolies breed complacency. Attackers win.
Airbus play? Smart adjacency. Military aircraft + datalinks. Sovereign cyber’s gold in tense times — China, Russia sniffing.
Swiss insur — wait, cutoff there. Tease of more? Sector’s insurers jumping in? Risk pools shifting.
Infotrust’s federal grab: AUD $5M cheap for barriers breached. Catalyst’s clearances? Priceless in gov land.
Quantum eMotion-SKV: Memoryless crypto + QRNG. Post-quantum full stack. Underrated gem amid AI noise.
But OpenAI-Promptfoo? PR gold. ‘We’re securing AI!’ While building god-models. Trust us.
Dry laugh. Yeah.
Overall? Frenzy signals maturity — or panic. Talent wars, regs tightening (EU AI Act, anyone?). Buyers stockpile IP before droughts hit.
Skeptic’s lens: Buyer remorse incoming. Integration hell awaits. Cultures clash, tech stacks bloat. We’ve seen it.
Databricks SIEM pivot? Ballsy. Data lakes + threats = power. SiftD.ai’s Splunk DNA shines. Antimatter’s agent auth? Timely.
Cellebrite drones: Forensics evolve. UAVs in crime? Rising. But ethical quagmires — mass surveillance baked in.
Who’s Winning This Deal Spree?
Winners: Incumbents like Rapid7, Databricks. Bolt-ons accelerate AI roadmaps. Rapid7’s Command? From assisted to autonomous. SOCs rejoice — or unemployment lines.
Losers: Fragmented startups. Sell now or get crushed. VCs cashing early checks.
Bold call — Wiz sets tone. $32B bar. Dwarfs these. Pushes hyperscalers deeper. Azure, AWS next?
One para wonder: Chaos breeds opportunity.
Long view: 38 deals. March only. Pace unsustainable. Debt markets twitchy, rates high. Pullback by summer?
Unique angle — historical parallel to 90s netsec boom. Check Point, ISS gobbled minnows. Survivors thrived. Copycats folded.
History rhymes. Heed it.
🧬 Related Insights
- Read more: US Router Ban: Foreign Gear Out, Prices Up, Security Gamble In
- Read more:
Frequently Asked Questions
What are the biggest cybersecurity M&A deals in March 2026?
Google’s Wiz ($32B, completed), Airbus-Ultra Cyber, Databricks’ double buy (Antimatter, SiftD.ai).
Why so many AI-focused cybersecurity acquisitions?
AI risks exploding — agents, LLMs need guards. Buyers preempt regs, talent grabs.
Will cybersecurity M&A slow down in 2026?
Doubt it short-term. Consolidation wave peaks, then digestion phase hits.
