April 2025 Cyber Funding & M&A Brief
Published by Pinpoint Search Group — the cybersecurity executive search firm that tracks every disclosed vendor funding round and acquisition in the sector.
At a glance
Get the full April 2025 dataset — every named company, round, investor, and segment.
What April told us
April 2025 was the largest disclosed-funding month in this series since the post-2021 peak. $2.06B in disclosed capital cleared across 46 funding rounds — more than double April 2024's $1.0B — and the distribution was unusually broad: 6 rounds at $100M or higher, against an average closer to 3 in the months before. The market did not just write a single hero check; it wrote a half-dozen of them, across XDR, supply chain, identity, networking, and data security.
The largest of these, ReliaQuest's $500M growth round led by EQT Partners, takes the XDR managed-security category to a new valuation tier. Chainguard's $356M Series D in software supply chain — its fourth appearance in the series — is the clearest signal yet that supply chain security has graduated from compliance-driven adoption to an investable platform category. Tailscale ($160M Series C in network security), Veza ($108M Series D+ in identity), and Cyberhaven ($100M Series D+ in data security) round out the top of the table. All five sit in segments where buyer behavior is well-documented, which is what's driving the unfreeze.
The segment mix was unusually flat — Identity led with 5 transactions, with Training, Threat Intel, and AI/LLM tied at 4 each. M&A volume was thin (only 3 acquisitions) but Palo Alto Networks' $700M acquisition of Protect AI is the structurally most interesting event in the month. Protect AI first entered this series as a Seed-stage AppSec company in December 2022; by 2025 it had been reclassified into the AI/LLM segment as its product evolved with the market. The exit at $700M, three years from first round, is the largest pure-play AI security acquisition we've tracked and validates the thesis that the major cyber platforms will buy rather than build their AI-security control planes.
Stage and segment breakdown
| Stage | Count |
|---|---|
| Seed | 13 |
| Series A | 14 |
| Series B | 8 |
| Series C | 1 |
| Series D+ | 3 |
| Growth Funding | 7 |
| Acquisition | 3 |
| Top segments | Transactions |
|---|---|
| Identity | 5 |
| Training | 4 |
| Threat Intel | 4 |
| AI/LLM | 4 |
| Supply Chain | 3 |
| Data | 3 |
Two deals worth your attention
ReliaQuest — $500M growth round led by EQT Partners. ReliaQuest's GreyMatter managed XDR platform raised $500M led by EQT Partners at a reported $3.4B valuation. This is the largest single funding event of the month and the largest XDR/MDR round in this series, signaling that the managed-detection category — which had been priced as services rather than software — is being repriced as a platform business.
Palo Alto Networks' $700M acquisition of Protect AI. Palo Alto Networks acquired Protect AI for ~$700M, folding the company's MLSecOps and AI runtime security stack into Palo Alto's platform. This is the largest pure-AI-security acquisition we've tracked and confirms a pattern that will dominate 2025–2026 M&A: the major cyber platforms will not build their AI/LLM security control planes organically. They will acquire them, and the venture-funded leaders in the segment will exit at growth-stage prices.
Companies we've covered before
Protect AI first appeared in December 2022 with a $14M Seed round under AppSec classification. Three appearances later — reclassified into the emergent AI/LLM segment as its product matured — the company exits to Palo Alto Networks for $700M. The Original→New segment shift inside Pinpoint's taxonomy tracks the company's own product evolution.
Chainguard first appeared in June 2022 with a $50M Series A in Supply Chain security. Across three additional rounds it returns with a $356M Series D in the same segment, with no drift in classification — a clean growth-stage arc in one of the cleaner emerging categories.
ReliaQuest first appeared in August 2020 with a $300M growth round in XDR. The April 2025 round at $500M is its third appearance and roughly doubles its prior known capitalization.
The other 47 transactions are in the data feed — including the 3 acquisitions whose values never hit the press. Get April's details and more →
Methodology
Every transaction in this brief was sourced from a primary public report and dedupe-checked against the master Pinpoint funding workbook, which now contains ~2,600 transactions back to May 2020. Funding totals reflect disclosed capital only; acquisition values are included where publicly available.
Each deal is classified against Pinpoint's normalized cybersecurity segment taxonomy — read directly off what the company says they protect and mapped to one of the canonical segments. The taxonomy has been maintained continuously since 2020 and currently covers roughly 55 segments. Identity, Data, Detection / Response, and Threat Intel have been tracked from the first month of the series; AppSec and GRC entered the following month; emergent categories (AI/LLM, Supply Chain, Quantum, Browser) are added when they first appear in vendor positioning. That normalization layer is what makes multi-year, cross-segment comparisons possible against an otherwise inconsistent vocabulary in the broader market.
About Pinpoint Search Group
Cybersecurity innovators work with Pinpoint Search Group to identify, attract, and land professionals that enable maturation, scale, and successful outcomes. As start-ups continue raising millions in funding and established vendors make acquisitions to round out their offerings, Pinpoint Search Group is keeping track.
Get the underlying data
The narrative above is the free version. The paid Pinpoint Cyber Funding Data feed gives you every named transaction, every disclosed investor, every segment classification — exportable, filterable, and updated as the deals close.