Cybersecurity Merger and Acquisition Update: SolarWinds Bought for $4.4 Billion

The cybersecurity mergers and acquisitions (M&A) market saw significant activity in February 2025, following a busy January. The month featured various key M&A deals in cloud security, API security, and identity access management, along with major acquisitions by Sophos and SolarWinds.

Sophos completed its acquisition of Secureworks for an estimated $859 million on February 3. The merger aims to leverage Secureworks’ threat intelligence and security operations expertise to enhance Sophos’ product offerings and expand its presence in the managed security services sector. Notably, Secureworks had previously laid off around 300 employees, representing 15% of its workforce in August 2023.

On February 7, SolarWinds finalized its acquisition by Turn/River Capital for a total enterprise value of $4.4 billion, transitioning the company into private ownership while retaining its name, brand, and headquarters in Austin, Texas.

Nozomi Networks and XONA Systems announced their merger on February 10, combining Nozomi’s operational technology (OT) security platform with XONA’s secure remote access solutions to enhance security for industrial control systems (ICS).

Harness and Traceable merged on the same day to offer holistic API security solutions throughout the software development lifecycle. This merger integrates Traceable’s API discovery capabilities into the Harness platform for robust API security.

Drata acquired SafeBase for $250 million on February 11, aiming to streamline security assessments by leveraging SafeBase’s platform to aid companies in showcasing their security posture and accelerating third-party security assessment processes.

A10 Networks acquired ThreatX on February 12, enhancing its web application and API security offerings with ThreatX’s advanced threat detection and mitigation capabilities. The acquisition reinforces protection against web application and API attacks.

CyberArk Software acquired Zilla Security for $175 million on February 13, integrating Zilla Security’s identity access governance and management platform into its portfolio to provide comprehensive control and visibility over user access privileges.

Deepwatch acquired Dassana on February 18, expanding its cloud security capabilities by adding Dassana’s security and cloud data aggregation and analytics platform. This acquisition enhances Deepwatch’s threat detection capabilities and visibility across multiple cloud environments.

Menlo Security acquired Votiro for $37.5 million on February 19 to enhance its file-based threat protection with Votiro’s anti-malware platform utilizing content disarm and reconstruction (CDR) technology.

Overall, the cybersecurity M&A landscape in February 2025 was marked by strategic acquisitions aimed at consolidating expertise, expanding product offerings, and enhancing security capabilities across various sectors within the cybersecurity industry.