21 Cybersecurity M&A Deals Reshape Industry in July 2026
Twenty-one cybersecurity-related merger and acquisition deals were announced in July 2026, signaling continued consolidation across identity protection, AI-driven detection, and network observability markets. Among the most notable transactions, California/Israel-based Cyera agreed to acquire Israeli startup Oasis Security for approximately $1 billion, unifying its data security platform with Oasis's non-human identity governance to safeguard enterprise AI agents and service accounts. Okta signed an agreement to acquire Palo Alto-based Permiso Security for roughly $200 million, adding continuous identity threat detection (ITDR) capabilities to protect human, machine, and autonomous AI identities across cloud environments. Organizations evaluating their own identity posture can verify exposure using an email breach checker and reinforce credentials with a password checker.
In the network and infrastructure space, CrowdStrike acquired the patents and source code of Israel's XM Cyber from Schwarz Group for an undisclosed sum, integrating exposure management and attack-path analysis directly into its platform. Infoblox entered a definitive agreement to purchase network intelligence and observability platform Kentik, blending DNS and network context with real-time traffic visibility to strengthen hybrid cloud cyber resilience. Security teams investigating DNS-layer risks can run a DNS leak test to validate their resolver configuration. Palo Alto Networks announced plans to acquire Embrace, a user-focused mobile and web observability platform, to unify mobile experience monitoring with threat visibility, while Barracuda Networks acquired Texas-based Evo Security to expand its BarracudaONE platform with multi-tenant identity, IAM, and PAM capabilities for MSP partners.
Cribl finalized its acquisition of Israeli AI detection engineering startup CardinalOps, bringing automated detection engineering to its AI platform to improve threat coverage and lower log management costs for enterprise SOCs, and is establishing a new Tel Aviv office as part of the deal. Bank of America revealed plans to acquire UK-based information security consultancy MDSec Consulting Limited, adding roughly 65 cybersecurity professionals and expanding its presence in northern England. For a detailed view of the more than 420 acquisitions announced in 2025, SecurityWeek's annual M&A report remains the definitive reference for tracking industry consolidation.