Cybersecurity
Cybersecurity Consolidation
M&A Timeline
Splunk, SailPoint re-IPO, CyberArk, Wiz. The megadeals that changed who is on the roster.
Mar 2024
DealCisco
Cisco closes Splunk (~$28B)
Security becomes a Splunk-plus-legacy segment. FY2026 security $8.232B.
12 Feb 2025
DealSailPoint
SailPoint re-IPO
IGA returns to public markets after Thoma Bravo. Q1 FY2026 ARR $925M.
30 Jul 2025
DealPalo Alto
PANW announces CyberArk (~$25B)
Identity named a platform pillar. $45 cash + 2.2005 PANW shares.
11 Feb 2026
DealPalo Alto
PANW closes CyberArk
CyberArk is no longer a roster row.
11 Mar 2026
DealAlphabet
Google closes Wiz (~$32B)
Largest Google deal. CNAPP is hyperscaler attach. Wiz is not a roster row.
PE Takeouts
Proofpoint, Sophos, KnowBe4. Mentioned here, not profiled.
| Company | Sponsor | Why it matters |
|---|---|---|
| Proofpoint | Thoma Bravo | Email security taken private. The missing public email-security P&L. |
| Sophos | Thoma Bravo | Endpoint/firewall mid-market. Not a public comparable for CRWD/FTNT. |
| KnowBe4 | Vista | Security awareness training. Human layer, not a platform. |
| SailPoint (prior) | Thoma Bravo then re-IPO 2025 | The round-trip that put IGA back on this page. |
Platform Attach vs Standalone Budget
Who is a CISO line item versus who is bundled into Microsoft, Google, or Cisco.
| Buyer budget | Standalone names | Attach names |
|---|---|---|
| Network / firewall / SASE | PANW, FTNT, ZS, CHKP, NET | Cisco Security on the switching quote |
| Endpoint / XDR / SOC | CRWD, S | Microsoft Defender / Sentinel |
| Identity | OKTA, SAIL, PANW (CyberArk) | Microsoft Entra |
| CNAPP / cloud | PANW Prisma, CRWD cloud, ZS | Wiz inside Google Cloud; AWS security services |
| Data / resilience | RBRK, VRNS, TENB, QLYS | Hyperscaler backup and DSPM SKUs |
Gen Digital Consumer
FY2026 $5.0B. Cyber Safety $3.34B, Trust-Based $1.66B. Different wallet from enterprise ARR.
Major Deals
Dollar table for the roster-changing transactions.
| Deal | Value (announced) | Closed | Roster effect |
|---|---|---|---|
| Google / Wiz | ~$32B cash | 11 Mar 2026 | Wiz is Alphabet, not a row |
| PANW / CyberArk | ~$25B cash-and-stock | 11 Feb 2026 | CyberArk is Palo Alto |
| Cisco / Splunk | ~$28B | Mar 2024 | Splunk is Cisco |
| SailPoint re-IPO | Listed Feb 2025 | 12 Feb 2025 | IGA is public again |
| Proofpoint / Sophos / KnowBe4 | PE | Prior years | Mention only, not profiled |
