Cybersecurity Buyers Chase AI and Identity in M&A Wave

Enterprise adoption of generative AI, cloud services and connected industrial equipment is widening the attack surface beyond employee accounts and endpoints. Security teams must now protect models, autonomous agents, machine credentials and operational technology, areas that many legacy products were not designed to cover. Large cybersecurity platforms are responding through acquisitions, using their balance sheets to add AI security, machine identity and industrial-system defenses faster than they could build them internally.

More than 215 cybersecurity acquisitions were recorded worldwide in the first half of 2026, with aggregate value exceeding $100 billion. Palo Alto Networks completed its roughly $25 billion purchase of identity-security specialist CyberArk on Feb. 11, while Alphabet-owned Google closed its $32 billion acquisition of cloud and AI security provider Wiz on March 11. The transactions show capital shifting from conventional product consolidation toward identity controls, cloud protection and defenses for emerging AI-driven attack surfaces.