May 2020 Cyber Funding & M&A Brief

Published by Pinpoint Search Group — the cybersecurity executive search firm that tracks every disclosed vendor funding round and acquisition in the sector.

At a glance

18 transactions
tracked across cybersecurity vendors in May 2020
$343.9M
in disclosed funding capital
12 funding rounds
— of which 5 were Seed or Series A
6 acquisitions — 1 with disclosed value ($70M CyberArk–Idaptive)

Get the full May 2020 dataset — every named company, round, investor, and segment.

What May told us

May 2020 opens the Pinpoint cyber funding data set. Eighteen transactions cleared across the month — twelve funded rounds and six acquisitions — with $343.9M in disclosed funding capital and a single disclosed M&A event. The funded side skews mid-stage (one large later-stage round at $70M and a cluster of Series B–D rounds in the $20M–$52M band) with five of the twelve rounds sitting at Seed or Series A, and the M&A column carries one Identity-segment tuck-in alongside five undisclosed-value transactions.

Cyberbit's $70M funding round in Training led the funded side, followed by Synack at $52M Series D+ in PenTesting, Expel at $50M Series D+ in Detection/Response, Semperis at $40M Series B in Identity, Aqua Security at $30M Series D+ in Container, and Orca Security at $20M Series A in Detection/Response. The named cohort spans six distinct segment classifications across twelve rounds.

On the M&A side, CyberArk's $70M acquisition of Idaptive in Identity was the only disclosed-value transaction; the other five acquisitions cleared without disclosed values. There were no nine-figure cyber M&A events in May 2020 and no take-private transactions.

Stage and segment breakdown

May 2020 Stage & Segment Breakdown
May 2020 Stage & Segment Breakdown
StageCount
Seed1
Series A4
Series B2
Series D+4
Acquisition6
Top segmentsTransactions
Detection/Response4
Data4
Identity3
Container3
Threat Intel2
PenTesting1

Two deals worth your attention

CyberArk's $70M acquisition of Idaptive in Identity. CyberArk acquired Idaptive at $70M in May, the only disclosed-value M&A event of the month and the first acquisition the Pinpoint data set tracks. Idaptive had been spun out from Centrify in 2018 as a standalone identity-as-a-service vendor; CyberArk's purchase folded that capability into its privileged-access platform. The deal carries the workbook's opening signal for strategic identity consolidation at a modest tuck-in size — sub-$100M, single-segment, and inside an identity vendor's existing platform thesis.

Cyberbit — $70M funding round in Training. Cyberbit raised $70M in a funding round for its cyber-range and security-team training platform, the largest funded event of May. The round and the CyberArk/Idaptive acquisition cleared at the same $70M disclosed size, an unusual symmetry at the workbook's opening point. Cyberbit's positioning sits at the edge of pure security tooling — the platform is used for security-operator skill development rather than runtime threat protection — and the round's nine-figure-adjacent scale signals investor appetite for security-adjacent training infrastructure at the data set's outset.

The other 16 transactions are in the data feed — including the 6 acquisitions whose values never hit the press. Get May's details and more →

Methodology

Every transaction in this brief was sourced from a primary public report and dedupe-checked against the master Pinpoint funding workbook, which now contains ~2,600 transactions back to May 2020. Funding totals reflect disclosed capital only; acquisition values are included where publicly available.

Each deal is classified against Pinpoint's normalized cybersecurity segment taxonomy — read directly off what the company says they protect and mapped to one of the canonical segments. The taxonomy has been maintained continuously since 2020 and currently covers roughly 55 segments. Identity, Data, Detection / Response, and Threat Intel have been tracked from the first month of the series; AppSec and GRC entered the following month; emergent categories (AI/LLM, Supply Chain, Quantum, Browser) are added when they first appear in vendor positioning. That normalization layer is what makes multi-year, cross-segment comparisons possible against an otherwise inconsistent vocabulary in the broader market.

About Pinpoint Search Group

Cybersecurity innovators work with Pinpoint Search Group to identify, attract, and land professionals that enable maturation, scale, and successful outcomes. As start-ups continue raising millions in funding and established vendors make acquisitions to round out their offerings, Pinpoint Search Group is keeping track.

Get the underlying data

The narrative above is the free version. The paid Pinpoint Cyber Funding Data feed gives you every named transaction, every disclosed investor, every segment classification — exportable, filterable, and updated as the deals close.

Subscribe to the data feed

Published 2020-06-05 · last updated 2026-06-25. The narrative and aggregate figures above are free; the full per-deal dataset is available to subscribers.