The full cyber security market, mapped across 12 core segments — every category rendered as a logo grid of the companies we track, paired with the latest market intelligence for that segment. Updated as the funnel evolves.
Application Security
Wk Jul 20 ‘26: Empirical Security (US) $25M Series A (Brightmind Partners, Costanoa, HPA) — AI-driven exploit prediction; custom models per org across 18K+ CVEs; $37M total. Prior wk Jul 14 (Sf#253): Casco (US) $13M Series A — AI BAS/red-teaming; SafeStack (NZ) acq NINJIO; Cybeats (CA) $1.1M post-IPO; Trugard acq Webacy. Jul 7: Root → Aikido Security ~$75M — OSS vuln backporting; Dawnguard (NL) $3.3M Pre-Seed.
Identity & Access Management
Wk Jul 14 ‘26 (Sf#253): Aura (US) $100M post-IPO equity (Accel, General Catalyst) — consumer identity theft/fraud protection. Argos Identity (US) $3M Seed (BonAngels) — AI-powered KYC/AML. Veridas (ES) merges with Fourthline — European digital ID compliance consolidation. Wk Jul 15-16: Oak (IL) $60M seed (Accel, CRV, Greylock) — AI-native identity OS for human/machine/AI agent identities; 1Password acq Apono (IL) ~$275M (JIT access); SailPoint acq Entro (IL) ~$200M (NHI). AI agent identity sprawl driving NHI consolidation wave. Prior: QIZ Security $17M seed; Keyfactor $1B+ (PQC/machine identity); Oasis → Cyera >$1B.
Risk & Compliance (GRC)
Wk Jul 14 ‘26 (Sf#253): pQCee (SG) $3.9M Seed (Lotus One, SGInnovate) — PQC governance platform. Trugard (US) acq by Webacy — on-chain smart contract risk consolidated. QIZ Security (IL) $17M Seed (Bessemer, Merlin; Jul 9) — cryptographic posture + PQC management. Wk Jul 15: Risk Ledger (UK) $32M Series B (Axiom Equity) — supply chain security network (16k+ orgs), US expansion + AI-enhanced TPRM. Prior: Mitigata (India) $15M Series B (Bessemer) — AI cyber resilience OS. Prior wk Jun 15: Magnitude $10M Seed (Ballistic) — continuous TPRM automation.
Network Security
Wk Jul 14 ‘26 (CMI): MazeBolt (IL) undisclosed round (CerraCap) — RADAR VectorAI™ continuous DDoS validation extended into AI-orchestrated attack simulation; targets CI, financial platforms, telcos. Prior: Akamai/LayerX (~$205M, Jul 2) — enterprise browser security absorbed into Zero Trust stack; Infoblox/Kentik (Jul 8) — DNS+asset visibility meets network observability for agenticOps. SAM Seamless/Qualcomm (>$150M); Timus/CyberFOX (MSP ZTNA).
OT / IoT & Critical Infrastructure
Wk Jul 16 ‘26 (CMI): Accenture acq Dragos (majority) + runZero + NetRise — $4.175B combined OT platform, largest-ever OT cyber deal; $208M ARR 53% YoY. Dream Security (IL) $260M Series C at $3B — sovereign AI for critical national infrastructure, $300M ARR. OT now a megadeal category. Prior: Hakimo $12M (physical AI/CI); SAM Seamless → Qualcomm >$150M.
Security Operations
Wk Jul 24: Abstract Security (US) $25M Series B (Cheyenne, AVP) — composable streaming SIEM; AI-native SOC architecture replacing monolithic stack; 380% ARR, 264% NRR; $50M total raised. Wk Jul 14-18 ‘26: CardinalOps (IL) acq by Cribl (~$100M) — agentic detection engineering absorbed into Cribl data platform; opens Tel Aviv R&D hub. Data-pipeline players moving into detection outcomes. XBOW (US) $35M strategic ext (total C $155M, $1B+ val) — autonomous AI pentest; NVIDIA, Accenture, Samsung, SentinelOne. Pulse Security AI (US) $8M seed — AI CISO ops mgmt. Theme: agentic SecOps (detect→respond→automate) the new acqui-target for data+pipeline incumbents.
AI Security
Wk Jul 22-24 ‘26: AegisAI (US) $36M Series A (Battery, Accel) — AI LLMs for email spear-phishing defense; AI phishing now 13.9% of all phishing and 2x more likely to bypass filters. StrongestLayer (US) $4.1M Seed Ext (Inovia) — reasoning-based email BEC/phishing detection ($9.3M total). Wk Jul 22: Cathedral (US) exits stealth $160M Seed at $1.4B val (a16z, Sequoia) — ex-DOGE team building AI-driven offensive/defensive cyber for US military. Wk Jul 21: Twenty (US) $30M (Khosla, $1.2B val, $168M total) — Pentagon AI cyber automation partner. Wk Jul 20: Neo Security (IL) $75M Series A exits stealth (a16z, Bessemer; total $100M) — agentic AI control plane for enterprise. Sensity AI (NL) $5.6M EIC Grant — deepfake detection. 1H ‘26: AI Security = #1 M&A sector (19 deals vs 2 in 1H ‘25); EU AI Act Aug 2 deadline accelerating urgency.
Data Security & Privacy
Wk Jul 14 ‘26 (CMI): LOGEX acq Tiplu (DE, pending regulatory) — creates Germany’s largest structured clinical hospital database; healthcare data security and AI analytics consolidation in European hospital sector. Prior: Syntonym (Turkey) undisclosed seed (Jun 22) — GDPR-compliant visual-data anonymization for image/video data.
Cloud Security
Wk of Jul 14 ‘26: Valarian (UK) $50M Series A (NEA-led) — sovereign control layer atop Kubernetes governing AI agents/models across cloud, on-prem, air-gap with customer-held keys; NEA’s first European defense-tech bet signals data sovereignty as a standalone segment. Prior wk: Dawnguard (Amsterdam) $3.3M pre-seed AI-native cloud security architecture automation.
Security Services
Wk Jul 14 ‘26 (Sf#253): Lookingpoint (US) acq by Presidio; One Connect, Inc. (US) acq by Amplix; OBDURIX (UK) undisclosed Seed — AI automation + pen testing services. The 20 MSP (49th acq) absorbs Sundance Networks (NM/PA/NY); CompassMSP (Agellus Capital) acq The Logic Group (Philadelphia). MSSP/services roll-ups dominate deal count — 5 of 9 weekly M&A in Sf#252-253. Prior wk: Eye Security (NL) $68.6M Series C (Sofina) — largest European MSSP round; FullProxy (UK) acq Viatel/Macquarie (Jul 3).
Threat Intelligence & Digital Risk
Wk Jul 20 ‘26: Cisco strategic investment in Zafran Security (IL, CTEM/exposure mgmt platform); undisclosed, follows rejected $150-200M M&A bid — Zafran chose independence and is raising. ZeamiCyberSecurity (JP) $307.8K Seed (aSTART) — early-stage security intelligence.
Endpoint Security
Wk Jul 22 ‘26: Glow (IL) exits stealth $180M Series A at $1.2B val (Sequoia, Cyberstarts, Greenoaks, Redpoint; ex-Meta VP/Snowflake/Claroty team) — AI-native prevention-first endpoint for the agentic era, born unicorn. Prior wk: Neo Security reclassified to AI Security segment. Jun ‘26: Ent exits stealth $100M seed (Decibel-led; Sequoia, Crosspoint, Craft) — prevention-first workspace/endpoint for humans + AI agents. AI-native endpoint and enterprise browser remain the hottest sub-segments.
