Cybersecurity Merger and Acquisition Update: CrowdStrike, SentinelOne, Check Point Included

In September 2025, the cybersecurity industry experienced a wave of merger and acquisition (M&A) activities, with major players like CrowdStrike, F5, SentinelOne, and Check Point focusing on enhancing their AI security offerings.

One significant deal was Mitsubishi Electric’s acquisition of Nozomi Networks for $1 billion, marking the largest transaction in the OT security sector. This move solidified Mitsubishi Electric’s position in the industry, with Nozomi Networks operating as an independent subsidiary post-acquisition.

Varonis made headlines by acquiring SlashNext, an AI-native email security provider, to bolster its data breach prevention services. Atif Mushtaq, SlashNext’s founder, joined Varonis as VP of data science following the deal, aiming to enhance customers’ email security and boost revenue by $5 million in Q3 of 2025.

Cato Networks entered the M&A arena by acquiring Aim Security, integrating its AI technologies into the Cato SASE Cloud Platform. This strategic move, coupled with an additional $50 million investment from Acrew Capital, positioned Cato Networks to accelerate enterprise adoption of AI agents and applications.

UltraViolet Cyber expanded its cybersecurity portfolio by acquiring Black Duck’s Application Security Testing (AST) services business. This acquisition strengthened UltraViolet’s ability to evaluate modern environments, including multi-cloud workloads, DevSecOps pipelines, and containerized deployments, enhancing its overall service offerings.

SentinelOne ventured into the M&A realm by announcing its acquisition of Observo AI for $225 million. By incorporating Observo’s AI-native telemetry pipeline management, SentinelOne aimed to complement its existing AI SIEM and data solutions, expanding its capabilities in the cybersecurity space.

F5 made a strategic move by acquiring CalypsoAI for $180 million to integrate its AI security capabilities into the F5 Application Delivery and Security Platform (ADSP). The acquisition broadened F5’s offerings and further reinforced its commitment to delivering innovative cybersecurity solutions.

SecurityScorecard’s acquisition of HyperComply aimed to enhance supply chain risk management capabilities by combining HyperComply’s AI-powered platform with SecurityScorecard’s security ratings and risk visibility tools. This move provided customers with a comprehensive view of their supply chain security posture.

DigiCert expanded its email security offerings by acquiring Valimail, a zero trust email authentication provider. By incorporating Valimail’s technology into the DigiCert ONE platform, customers could benefit from improved protection against phishing, spoofing, and other email-based threats.

CrowdStrike augmented its AI security capabilities by acquiring Pangea for $260 million, extending the CrowdStrike Falcon platform to offer a complete AI Detection and Response (AIDR) service. This acquisition reinforced CrowdStrike’s commitment to delivering cutting-edge cybersecurity solutions to its customers.

Overall, the flurry of M&A activities in September 2025 underscored the cybersecurity industry’s focus on AI-driven security solutions, signaling a continued commitment to innovation and growth in the face of evolving cyber threats.