The Biggest Buyers in Cybersecurity Now Are Not Cybersecurity Companies
A search giant, a workflow platform, a payment network, and a consultancy are now among the most aggressive acquirers in cybersecurity, and their motivations have little to do with selling security products.
This post may contain links from our sponsors and affiliates, and Flywheel Publishing may receive compensation for actions taken through them.
The biggest buyers in cybersecurity are a search and cloud company, a workflow software vendor, a payment network, and a consultancy. None sells security as its main business. The four acquirers below are ranked by size and strategic weight of announced security deals.
1. Alphabet: Wiz Turns Security Into a Cloud Sales Tool
On March 11, 2026, Alphabet (NASDAQ:GOOGL | GOOGL Price Prediction) completed its $32 billion acquisition of Wiz, a cloud security company. Wiz joins the Mandiant and Chronicle/SecOps assets Google already owned.
Security is often the first question enterprises ask before moving workloads to the cloud. Google Cloud grew 82% year over year to $24.77 billion in Q2 FY26, and the CEO pointed to “strong demand for our security solutions.” Security helps sell cloud capacity. Next to a market cap of about $4.2 trillion, Wiz is small.
The stock trades at $343.50, up 9.0% year to date. The main risk is that customers on rival cloud platforms may hesitate now that Google owns Wiz.
2. ServiceNow Wants to Own the Incident From Alert to Fix
ServiceNow (NYSE:NOW) completed its purchase of Veza on March 2, 2026, and Armis on April 20, 2026. Fortune described an $8 billion cybersecurity acquisition as the center of this strategy in an August 19, 2026, feature.
ServiceNow already runs the ticket queue where security incidents get routed. Armis “already tracks 7 billion of those devices in real time,” said ServiceNow CEO Bill McDermott, and Veza maps human, machine, and AI identities. Together, they let ServiceNow own the workflow from detection to remediation. Security and risk solutions featured in 16 of ServiceNow’s top 20 deals in Q2. Even so, the security business runs on top of the core ITSM platform, and the purchase price is a fraction of a market cap of about $138.9 billion.
Shares trade at $134.38, down 8.9% year to date, at a trailing P/E of 84. Note that management expects Armis integration to pressure margins before they normalize by FY 2027.
3. Visa Buys Fraud Defense for Its Own Network
Visa (NYSE:V) agreed to buy BioCatch for $2.4 billion on August 3, 2026. The deal has been announced but not yet completed.
BioCatch’s behavioral biometrics spot fraud by studying how users type, tap, and swipe. For Visa, that means lower fraud losses in its core payments business. Risk and security services are “collectively growing north of 20%,” according to Visa CEO Ryan McInerney. Agentic commerce adds another reason, as it requires “trust that the agent is authorized.” The purchase price is small next to $11.63 billion of net revenue in fiscal Q3 alone.
Shares trade at $360.66, down 2.2% over the past month. Visa has no record of running a standalone security vendor, making integration harder.
4. Accenture Builds an OT Security Platform Deal by Deal
In fiscal Q3 2026, Accenture (NYSE:ACN) agreed to buy a majority stake in Dragos plus all of runZero and NetRise. All three secure operational technology (OT), meaning industrial control systems in places like factories and utilities. According to the company’s October 1, 2026, earnings call, the deals closed in September. Accenture has disclosed a combined transaction enterprise value near $4.18 billion. The three deals were part of a platform expansion spread across 17 acquisitions in fiscal 2026 and 2027.
Accenture already integrates the factory and utility systems these tools protect. OT security brings product revenue with “non-FTE commercial models,” meaning revenue not charged by headcount. Security remains a piece of a business with $74.2 billion in fiscal 2026 revenue.
Shares rose 11.1% in the month ending October 5, 2026, closing at $198.90, but are down 23.5% year to date. The main risk is that a consultancy now has to run software platforms. The CEO acknowledged such deals “may not make as big a contribution … in the first couple of years.”
Buyer Pool Is Wider Than Investors Model
SecurityWeek counted 37 cybersecurity deals announced in June 2026, 21 in July, and 33 in August, mostly involving private targets. These four acquirers are buying security to protect and enhance their core businesses. Any large company with a data problem is now a serious buyer of security assets, making the acquirer pool much larger than the security vendors investors track.
Contact [email protected] for any questions or corrections.
Trey has been an editor and author at 24/7 Wall St. for more than a decade, where he has published thousands of articles analyzing corporate earnings, dividend stocks, short interest, insider buying, private equity, and market trends. His comprehensive coverage spans the full spectrum of financial markets, from blue-chip stalwarts to emerging growth companies.
Beyond 24/7 Wall St., Trey has created and edited financial content for Benzinga and AOL's BloggingStocks, contributing additional hundreds of articles to the investment community.
Trey's editorial expertise extends across multiple publishing environments. He served as production editor at Dearborn Financial Publishing and development editor at Kaplan, where he helped shape financial education materials. Earlier in his career, he worked as a writer-producer at SVE. His freelance editing portfolio includes work for prestigious clients such as Sage Publications, Rand McNally, the Institute for Supply Management, the American Library Association, Eggplant Literary Productions, and Spiegel.
Outside of financial journalism, Trey writes fiction and has been an active member of the writing community for years, moderating workshop sessions at regional conventions.
