Security1 publisher2 min readPublished
Echo bought Minimus's enterprise customer contracts after the container vendor wound down
SecurityWeek logged 33 cybersecurity acquisitions in August 2026. Two of them took technology assets out of small vendors instead of buying the vendors, and only Kiteworks' move into Japan promised customers unchanged contracts and pricing.
The Watch · Security desk
What happened
- SecurityWeek counted 33 cybersecurity M&A deals announced in August 2026, after 21 in July and 37 in June.
- Echo bought the technology assets and enterprise customer contracts of Tel Aviv container image vendor Minimus in an all-cash deal following Minimus's wind-down, with terms estimated at a few million dollars.
- Cribl bought technology assets and IP from San Francisco SOC startup Radiant Security and will put its autonomous alert triage and incident response into Cribl's telemetry data platform.
- The priced deals were led by Visa's $2.4 billion cash purchase of BioCatch, Munich Re's $575 million agreement for At-Bay and Datavault AI's $94.5 million all-cash deal for CyberCatch.
- Brinqa acquired PlexTrac to fold penetration test workflow and reporting into its continuous threat exposure management platform as a check on remediation.
Compiled by The WatchSomething wrong?How this is made
Why it matters
- exposure Radiant Security's existing users have no written commitment covering their support or renewal terms. Cribl bought code and IP, and the announcement does not say who will honour those terms.
- cost With 29 of the 33 deals unpriced, a security team renegotiating with a newly acquired vendor has no public comparable to argue value from.
- decision Kiteworks' language on WAMNET is the clause worth demanding when your vendor is bought. No other acquirer among the August deals committed to matching it.
- constraint August ran below 2025's monthly acquisition pace, so a vendor citing industry consolidation for a slipped roadmap has weak cover.
In a roundup, an asset purchase and a company purchase are reported the same way. At renewal, they are not. Echo's deal names the enterprise customer contracts it acquired [9]. Cribl's names the capability going into the telemetry pipeline, autonomous alert triage and incident response, and not the customers who were running it [6]. When an announcement stays silent on contracts, support routing can change without the customer having a documented commitment to invoke.
Kiteworks is the one deal in the list where continuity is stated. WAMNET Japan K.K.'s existing contracts, pricing and support stay in place, and customer data remains hosted in Japan [12]. It is Kiteworks' seventh acquisition in less than five years [12].
Four of the 33 deals carry a number, and one of those numbers is unofficial: SecurityWeek reports Deel's purchase of the Israeli deepfake detection firm Clarity as reportedly valued at $40-50 million, with terms not officially disclosed [8]. Take the four at the Deel midpoint and August's disclosed value is about $3.11 billion, of which Visa's BioCatch purchase is roughly 77 percent [4][5]. That leaves 29 deals with no public price at all [6].
The monthly counts do not support a surge reading. August's 33, July's 21 and June's 37 come to 91 deals over three months, an average of about 30 a month [1][2]. SecurityWeek's own tally for 2025 was more than 420 acquisitions, which is at least 35 a month [4][3].
The August announcements, as reported, do not name a migration deadline, a repricing, or an end-of-life date for an acquired product. What they name is roadmap intent. Fortinet said its purchase of Virtue AI will enhance its AI security offering across models, applications and agentic systems, drawing on Virtue's agentic system red teaming, agent protection and governance, continuous AI validation and real-time guardrails [11]. Palo Alto Networks bought Console, an AI-native platform that builds agentic workflows from natural language, and said it will deepen the agentic capabilities of Cortex [14].
What to watch
- Whether Cribl publishes support and migration terms for Radiant Security's existing customers, which the acquisition announcement does not address.
- Confirmation of the Deel/Clarity price; SecurityWeek reports $40-50 million as unofficial, with terms not disclosed.
- Whether September's count returns above 35 deals, the monthly pace implied by 2025's 420-plus acquisitions.