October 2026 Cyber Funding & M&A Brief
Published by Pinpoint Search Group — the cybersecurity executive search firm that tracks every disclosed vendor funding round and acquisition in the sector.
At a glance
Get the full October 2026 dataset — every named company, round, investor, and segment.
What October told us
October was a buyers' month. Its 37 acquisitions are 13 more than September's 24 and the most of any month this year so far, and they carried the month to 72 transactions, two more than September. Funding moved the other way: $904M across 34 rounds, the lightest month since May and about a third below the $1.34B raised in October 2025. Swings like that are common in cybersecurity funding from one month to the next.
Security services firms were again at the center of the consolidation, accounting for 16 of the 37 acquisitions, up from 10 in September. Several buyers came back more than once: sequrio bought Althammer & Kill, Nextwork, and DATATREE, and SGS bought Prescient Security and NetSentries, while Accenture added Global Security Experts. Aikido Security picked up two human-risk vendors, Cyberly and Outkept, and IonQ, a quantum computing company, agreed to buy network-security vendor Elisity. AI developers also showed up on the buy side, with Anthropic acquiring Opaque and Cognition acquiring Corridor.
On the funding side, 20 of the 34 rounds (59%) were Seed or Series A, and two reached $100M: Armadin ($265M) and Blackwall ($100M). &Truth's $70M seed round was the third largest of the month. Vulnerability and AI security led with seven rounds each. Reach Security ($50M) and Hadrian ($40M) joined Armadin on the vulnerability side, while Harmonic Security ($50M), Pluto Security ($34M), and Rein Security ($25M) raised for AI security. Separately, security services firm Chaleit went public, the month's only IPO.
Stage and segment breakdown
| Stage | Count |
|---|---|
| Acquisition | 37 |
| Seed | 15 |
| Series A | 5 |
| Series B | 4 |
| Series C | 1 |
| Top segments | Transactions |
|---|---|
| Security Services | 17 |
| AI/LLM | 9 |
| Vulnerability | 8 |
| Identity | 8 |
| Data | 4 |
| AppSec | 4 |
Two deals worth your attention
Proofpoint — acquisition of Varonis. Proofpoint agreed to buy Varonis for $6.3B. Varonis is the publicly traded data-security vendor whose software maps where a company's sensitive data sits and who can reach it. It follows Proofpoint's $1.8B agreement to buy email-security vendor Hornetsecurity in May 2025 and its acquisition of AI-security startup Acuvity in February 2026. Proofpoint has been private since Thoma Bravo's $12.3B take-private in April 2021, and its buying points toward one platform covering email, data, and how employees use AI tools.
Armadin — $265M Series B. Armadin, the company Mandiant founder Kevin Mandia launched publicly this year, raised its Series B from a group led by Andreessen Horowitz and Accel. It is the third Armadin round we've tracked in under a year: a $24M seed in January and a $165.2M Series A in March came first, about $454M in total. Armadin builds AI agents that test a company's defenses the way an attacker would, finding weaknesses before someone else does.
Companies we've covered before
Elisity. Elisity raised a $7.5M seed in 2020, a $26M Series A in 2021, and a $37M Series B in 2024, and this month agreed to be acquired by IonQ in an all-stock deal worth $1.15B, plus up to $150M more tied to performance.
Harmonic Security. Harmonic, which governs how employees use generative AI tools at work, raised a $7M seed in 2023 and a $17.5M Series A in 2024, and returns with a $50M Series B led by Crosspoint Capital Partners.
Infisical. Infisical, which manages the passwords, keys, and other secrets that software uses to connect to other systems, moves from a $2.8M seed in 2023 and a $16M Series A in 2025 to a $40M Series B.
The other 70 transactions are in the data feed. Get October's details and more →
Methodology
Data as of November 2, 2026. Pinpoint updates its dataset as new information is disclosed; figures for earlier periods may be revised in later reports, with changes noted in the next quarterly report and restated annually.
Every transaction in this brief was sourced from a primary public report and dedupe-checked against the master Pinpoint funding workbook, which now contains roughly 2,900 transactions back to May 2020. Funding totals reflect disclosed capital only; acquisition values are included where publicly available.
Each deal is classified against Pinpoint's normalized cybersecurity segment taxonomy — read directly off what the company says they protect and mapped to one of the canonical segments. The taxonomy has been maintained continuously since 2020 and is adjusted as the market changes. Identity, Data, Detection / Response, and Threat Intel have been tracked from the first month of the series; AppSec and GRC entered the following month; emergent categories (AI/LLM, Supply Chain, Quantum, Browser) are added when they first appear in vendor positioning. That normalization layer is what makes multi-year, cross-segment comparisons possible against an otherwise inconsistent vocabulary in the broader market.
About Pinpoint Search Group
Cybersecurity innovators work with Pinpoint Search Group to identify, attract, and land professionals that enable maturation, scale, and successful outcomes. As start-ups continue raising millions in funding and established vendors make acquisitions to round out their offerings, Pinpoint Search Group is keeping track.
Get the underlying data
The narrative above is the free version. The paid Pinpoint Cyber Funding Data feed gives you every named transaction, every disclosed investor, every segment classification — exportable, filterable, and updated as the deals close.
New this month: click any funded company in the dashboard to open its page — what it does, where it's based, its segment, and its round history, with amounts and investors for subscribers.