August 2026 Cyber Funding & M&A Brief
Published by Pinpoint Search Group — the cybersecurity executive search firm that tracks every disclosed vendor funding round and acquisition in the sector.
At a glance
Get the full August 2026 dataset — every named company, round, investor, and segment.
What August told us
August tilted toward consolidation. Sixteen companies were acquired against 20 funding rounds, and the buyers were mostly established platforms and carriers reaching for specialists rather than building in-house. CrowdStrike bought XM Cyber, Fortinet bought Virtue AI, Munich Re bought cyber-insurance vendor At-Bay, and Visa bought behavioral-biometrics vendor BioCatch. Socure did both at once, raising $156M and acquiring Fravity in the same month. Most acquisition prices in the sector are never disclosed, so the month reads better by who is buying than by any single sticker value.
The funding that did happen was concentrated and late-stage. The five largest rounds — Saviynt ($255M, Identity), Horizon3.ai ($250M, Vulnerability), Socure ($156M, Identity), Alice ($140M, AI/LLM), and Zenity ($125M, AppSec) — together account for roughly three-quarters of the month's disclosed capital. Only nine of the 20 rounds were Seed or Series A, a lower early-stage share than 2026 has typically run, and the biggest checks went to companies raising their third, fourth, or fifth tracked round rather than to new names. At $1.27B across 20 rounds, August comfortably cleared the billion-dollar mark — below July's $1.56B and June's $1.68B, but nearly three times the $440M raised a year earlier.
Identity and fraud ran through both sides of the ledger. Saviynt and Socure landed the two largest identity rounds, while Visa's move on BioCatch and Socure's on Fravity were identity-and-fraud acquisitions. AI-security names were unusually active too — Alice's $140M round, Fortinet's purchase of Virtue AI, and early rounds for Mindgard, Attestable, and Arrakis all landed inside the month.
Stage and segment breakdown
| Stage | Count |
|---|---|
| Acquisition | 16 |
| Seed | 6 |
| Series A | 3 |
| Series B | 1 |
| Series C | 1 |
| Series D+ | 2 |
| Top segments | Transactions |
|---|---|
| Fraud | 5 |
| Detection/Response | 5 |
| AI/LLM | 4 |
| Identity | 4 |
| Vulnerability | 3 |
| AppSec | 3 |
Two deals worth your attention
Saviynt — $255M growth round. Saviynt's raise was the largest funding round of the month and the latest step in one of the longer identity arcs this series tracks: a $130M round in 2021, $205M in 2023, and $700M in late 2025 before this $255M. The company sells identity governance — deciding who inside an organization is allowed to access what — a category that has drawn steady late-stage capital as enterprises consolidate fragmented access tools onto single platforms. Identity again led August both by transaction count and by the size of the checks written, the pattern that has held across 2026.
Fortinet — acquisition of Virtue AI. Fortinet, one of the sector's largest platforms, acquired Virtue AI, a startup that secures AI systems against manipulation and misuse. It is the M&A side of a category that also drew a wave of funding in August — Alice's $140M round, Zenity's $125M Series C for securing AI agents, and early rounds for Mindgard, Attestable, and Arrakis. AI security is now pulling in capital and acquirers at the same time, the signature of a segment moving from emerging to essential: incumbents are buying the ability to defend AI while investors fund the next set of entrants. Expect more platform vendors to acquire their way into AI defense rather than build it from scratch.
Companies we've covered before
Socure. Socure has raised repeatedly across the series — $100M in 2021, $450M later that year, and $95M in 2023 — and returns in August on both sides of the ledger at once: a $156M raise and its own acquisition of Fravity. It is a rare case of a workbook-tracked company raising and buying in the same month.
Zenity. Zenity has escalated cleanly through every stage since 2021 — a $5M seed, a $16M Series A in 2023, a $38M Series B in 2024 — and August's $125M Series C roughly triples its prior round, one of the sharper step-ups in the current AppSec cohort as attention shifts to securing AI agents.
The other 34 transactions are in the data feed. Get August's details and more →
Methodology
Every transaction in this brief was sourced from a primary public report and dedupe-checked against the master Pinpoint funding workbook, which now contains roughly 2,700 transactions back to May 2020. Funding totals reflect disclosed capital only; acquisition values are included where publicly available.
Each deal is classified against Pinpoint's normalized cybersecurity segment taxonomy — read directly off what the company says they protect and mapped to one of the canonical segments. The taxonomy has been maintained continuously since 2020 and currently covers roughly 55 segments. Identity, Data, Detection / Response, and Threat Intel have been tracked from the first month of the series; AppSec and GRC entered the following month; emergent categories (AI/LLM, Supply Chain, Quantum, Browser) are added when they first appear in vendor positioning. That normalization layer is what makes multi-year, cross-segment comparisons possible against an otherwise inconsistent vocabulary in the broader market.
About Pinpoint Search Group
Cybersecurity innovators work with Pinpoint Search Group to identify, attract, and land professionals that enable maturation, scale, and successful outcomes. As start-ups continue raising millions in funding and established vendors make acquisitions to round out their offerings, Pinpoint Search Group is keeping track.
Get the underlying data
The narrative above is the free version. The paid Pinpoint Cyber Funding Data feed gives you every named transaction, every disclosed investor, every segment classification — exportable, filterable, and updated as the deals close.