The new quarter picked up exactly where the last one left off. Keyfactor took a billion dollars of growth capital, Akamai bought LayerX, Qualcomm bought SAM Seamless Network, and Cyera, fresh from its own $600 million raise, turned buyer and swallowed Oasis Security. Ten more cyber companies went out of business. The consolidation story we called out at the end of Q2 has not paused for breath.

We also take the long view this week, all the way to 2076.

Let's dive in.

Keyfactor raises $1B. Summit Partners leads a billion-dollar growth round for the machine-identity and PKI platform.

Akamai buys LayerX for $205M, and Qualcomm buys SAM Seamless Network for $100M.

Cyera acquires Oasis Security. The data-security giant moves into non-human identity, and one of our named Bold Call targets comes off the board.

Elliptic raises $120M and Valarian $50M, as sovereign and crypto-crime tooling keeps attracting capital.

This week's Trident View: 175 new companies met and what the gap between them teaches us.

This week's Insider Insight: what will cyber look like when we are drawing our pensions?

We have sat down with 175 different cyber companies this year.

Not calls. Not emails. First meetings, the real thing, from January through last week.

That is a number some firms would bury. We think it is the most honest thing we can tell you about how this business actually works.

Not every company we meet needs us. Some are not hiring yet. Some are a year away from building a go-to-market team and just want to think out loud with someone who sees the market every day. A few will never be a fit, and we would rather know that after an honest hour than three months into a search that was never going to work.

So we take the meeting anyway.

Because the ones that do convert almost never convert on the day. A founder we met in February raises in May and calls us in June. A VP of Sales we spoke to about their own hiring plan moves companies and takes us with them. The conversation that goes nowhere in the moment is the one that comes back around when the funding lands, and it comes back because we were useful before there was anything in it for us.

That is the difference between a pipeline and a network. A pipeline is a list of people who might buy something this quarter. A network is 174 companies who know exactly who we are, what we know, and what we are like to work with, whether or not they need us today.

Who’s around to be 176…

Elliptic
Series D, $120M (One Peak Partners)
Blockchain analytics used by banks, exchanges and law-enforcement agencies to trace illicit crypto flows and manage financial-crime risk, at a $670 million post-money valuation. Other investors: Nasdaq Ventures, Evolution Equity Partners, AlbionVC, Volution Ventures, Circle Ventures, Deutsche Bank, British Business Bank and J.P. Morgan.

Category: Financial Crime / Blockchain Analytics
HQ: London, United Kingdom

Valarian
Series A, $50M (New Enterprise Associates)
Secure data compartmentalisation and communications infrastructure built to enforce digital sovereignty for governments and critical enterprises. Other investors: XTX Ventures, Lightbank, Sequel Venture Partners, Molten Ventures, Scout Ventures, ARTIS, IQ Capital Partners, Founders Factory and Nikesh Arora.

Category: Sovereign / Secure Infrastructure
HQ: London, United Kingdom

Arkenstone Defense
Seed, $43M (J2 Ventures)
Federal contracting software that strips the friction out of selling technology into the national-security market, at a $75 million post-money valuation. Other investors: Tau Ventures, Evolution VC Partners, Crossover VC, ARTIS, Susa Ventures and Granite Hill Capital Partners.

Category: GovTech / Defence
HQ: Menlo Park, CA

LinqAlpha
Series A, $22M (Atinum Investment, GFT Ventures, AVP)
AI research workflow platform for institutional investment analysis, at an $85 million post-money valuation. Other investors: Z Venture Capital, Samsung Securities, Hana Ventures, InterVest, SBI Investment and Mirae Asset Venture Investment.

Category: AI / Data Security
HQ: New York, NY

QIZ Security
Seed, $17M (Bessemer Venture Partners, Evolution Equity Partners, Merlin Ventures)
Cryptographic risk management, helping enterprises inventory and govern their cryptography ahead of the quantum transition. Other investors: Singtel Innov8, Qino Cyber Capital and Qbeat Ventures.

Category: Post-Quantum / Crypto Governance
HQ: Lewes, DE

Hakimo
Series A2, $12M (Zigg Capital)
AI security operations for the physical world, applying cyber-style autonomous monitoring to cameras, doors and alarms. Other investors: Neotribe Ventures, Defy Partners, Rocketship.vc and Vertex Ventures Southeast Asia & India.

Category: Physical Security / AI
HQ: Menlo Park, CA

Didit
Venture Funding, $7.5M
Privacy-first identity verification and fraud prevention, with free KYC as its wedge into the market. Investors: Orange Collective, Transpose Platform Management, N1, Pioneer Fund, Rebel Fund, Lobster Capital, Founders Future and Y Combinator.

Category: Identity
HQ: San Francisco, CA

Savi Security
Seed, $7M (Acrew Capital)
Scam and fraud protection for consumers, defending against fraudulent calls, messages and digital threats. Other investors: TTCER Partners, Resolute Ventures and Magnify VC.

Category: Fraud / Consumer Security
HQ: Los Angeles, CA

TenetX
Seed, $6.7M (undisclosed investors)
AI governance platform for authoring, reviewing and auditing the policies that constrain enterprise AI models.

Category: AI Governance
HQ: Fremont, CA

Edera
Venture Funding, $6.5M (undisclosed investors)
AI workload security that isolates containers like virtual machines, hardening the infrastructure AI runs on.

Category: AI Infrastructure Security
HQ: Seattle, WA

Vigilant Sec
Seed, $3.6M (undisclosed investors)
Fully managed cybersecurity with unified telemetry and proactive threat prevention, raised on SAFE notes.

Category: MDR
HQ: Baltimore, MD

Dawnguard
Early Stage VC, $3.3M (BNVT Capital)
Cloud security architecture validated at the design stage, before a single line of infrastructure is deployed. Other investors: Curiosity VC and eCAPITAL entrepreneurial Partners. (This week's Company Spotlight.)

Category: Cloud Security
HQ: Amsterdam, Netherlands

8Layers
Seed, $2.9M (JME Venture Capital)
Identity security platform managing identity risk across the full incident lifecycle. Other investors: Bankinter, CriteriaCaixa, Lanai Ventures, Draper B1, GoHub Ventures, Zubi Capital and Secways.

Category: Identity
HQ: Madrid, Spain

Hero Security
Early Stage VC, Undisclosed (Lytical Ventures)
Vendor risk management with continuous, automated security scoring of third parties.

Category: Third-Party Risk
HQ: Tel Aviv, Israel

Oasis Security → Acquired by Cyera
Deal Type: Acquisition
Deal Date: July 7, 2026
Deal Size: Undisclosed (reported at over $1B)

The buyer becomes the acquirer. Cyera raised $600 million last month at a $12 billion valuation, the largest cyber round of the quarter, and has now reached a definitive agreement to buy Oasis Security, a leader in non-human identity management. The price is not official, though Israeli press has put it above a billion dollars. It is a logical move: Cyera secures data, and machine identities are how data gets reached. It is also a notable one for us, because Oasis was one of the two companies we named as standing acquisition targets when we made our June Bold Call on Microsoft. Someone got there first, and the pool of independent targets just got smaller.

LayerX → Acquired by Akamai Technologies (NASDAQ: AKAM)
Deal Type: Acquisition
Deal Date: July 2, 2026
Deal Size: $205M

Browser security goes mainstream. LayerX secures the browser as an enterprise workspace, the place where most SaaS and AI usage now actually happens, and Akamai is folding it into its enterprise security portfolio.

SAM Seamless Network → Acquired by Qualcomm (NASDAQ: QCOM)
Deal Type: Acquisition
Deal Date: July 1, 2026
Deal Size: $100M

Qualcomm buys its way into connected-device security. SAM protects home and small-business networks and the devices on them, a natural fit for a chipmaker that sits inside billions of those devices.

Kentik → Acquired by Infoblox (backed by Vista Equity Partners and Warburg Pincus). Network observability joins the DNS and network-security platform.
Evo Security → Acquired by Barracuda Networks (backed by KKR). Identity and access management for managed service providers.
FullProxy → Acquired by Viatel Technology Group. The Glasgow application-security specialist joins an Irish infrastructure group.

Private equity's cyber run has not slowed, and July opened with the biggest single cheque of the month so far.

Keyfactor → PE Growth, an estimated $1B (Summit Partners and others). A billion dollars of growth capital for machine-identity and PKI management, one of the largest private investments in cyber this year and a direct bet on the same non-human identity thesis driving the Cyera and SailPoint deals.
Sophos → PE Growth (Dean & Dean Capital Group). Further development capital into the Thoma Bravo-owned endpoint giant.
OryxAlign → PE Growth (Palatine Private Equity). London managed IT and cyber services backed for its next phase of growth.
LookingPoint → Acquired by Presidio (backed by Clayton, Dubilier & Rice). Another network and security integrator rolled up.

A brutal fortnight at the bottom of the market. Ten cybersecurity companies ceased operations:

The pattern we flagged at quarter end continues: the top of the market raises, the middle gets bought, and the tail quietly disappears.

Here is a question worth sitting with. What does this industry look like in fifty years, when the people building it today are collecting their pensions?

Start with what will not change. There will still be people who want what other people have, and there will still be systems standing between them. Every technology humans have ever built has been attacked by other humans, and there is no reason to think 2076 breaks the streak. Cyber does not get solved. It gets inherited.

But almost everything else looks different.

The most likely change is that most of the fighting stops being done by people. The tools we are funding today, the autonomous threat hunters, the agentic red teams, the AI SOCs, are the first crude ancestors of systems that will eventually attack and defend at machine speed, without waiting for a human to approve the move. In fifty years, the front line is probably algorithms against algorithms, running in milliseconds, with people supervising rather than fighting. The job title "security analyst" may look as dated as "switchboard operator" does now.

The perimeter will have moved again, too, and probably somewhere strange. We started by defending buildings, then networks, then clouds, then identities. Now we are learning to defend AI agents. By 2076 the thing worth protecting may be something we would struggle to name today: cognitive infrastructure, neural interfaces, the integrity of what a machine believes to be true. Post-quantum cryptography, the thing half this newsletter is about, will either be ancient plumbing nobody thinks about or a cautionary tale about a migration we started too late.

Will companies still be built? Almost certainly, and that is the optimistic part. Every prediction that security would consolidate into a few giant platforms has been made before, and every time, a new attack surface has appeared and a new generation of founders has appeared with it. Cloud created a thousand companies. AI is creating a thousand more. Whatever comes after AI will do the same. The forms will change, the founders will change, but the cycle of a new technology arriving and someone standing up to defend it looks about as durable as anything in this industry.

The good it does may become invisible, which is the highest compliment a security industry can be paid. If it works, our grandchildren will trust their systems the way we trust that the water is clean, without thinking about the enormous machinery keeping it that way. Elections that cannot be forged. Medical devices that cannot be hijacked. Power grids that stay up. Security becoming boring would be its greatest achievement.

And the harm? That is the honest part. The same capabilities cut both ways, and they always have. Defensive AI is offensive AI wearing a different badge. The tools that protect a democracy protect an autocracy just as well, and the surveillance built to catch criminals works just as neatly on dissidents. We are already watching sovereign cyber divide along national lines, and fifty years of that is not obviously a happier world. The most uncomfortable possibility is not that cyber fails. It is that it succeeds, for whoever is holding it.

The Trident Take: whatever the machines end up doing, the interesting question is what is left for us, and our bet is that it is judgement. The technical work automates first, it always does. What does not automate is deciding what is worth defending, who to trust, which risk to accept, and what a company should build. That is not a security skill, it is a human one, and it is why we are relaxed about the long-term future of the people in this industry. The tools will be unrecognisable in fifty years. The need for people who can think clearly under pressure, and sell a hard idea to a sceptical buyer, will not have changed at all.

Website - dawnguard.ai

Most cloud security tools are archaeologists. They dig through what you have already built, find what is broken, and hand you a list. Dawnguard's bet is that the whole exercise is backwards, and that the right time to fix a cloud architecture is before it exists.

The Founders. Dawnguard was founded in 2025 in Amsterdam by chief executive Mahdi Abdulrazak and chief technology officer Kim van Lavieren, who launched the company out of stealth as, in their own framing, big-tech cyber leaders setting out to rewrite the DNA of cybersecurity. They are joined by Sarah van Lavieren as chief operating officer and David van der Hoeven as chief information security officer. The team has grown to 42 people in barely a year, from 11 at its first round.

The Thesis. Security has spent a decade shifting left, moving from patching production to scanning code. Dawnguard wants to shift further left still, all the way to the whiteboard. Their argument is that the most expensive security failures are not bugs, they are architectural decisions: the wrong trust boundary, the wrong data flow, the wrong assumption baked in at design time and discovered eighteen months and several million dollars later. Catch it in the diagram and it costs nothing. Catch it in production and it costs everything.

The Product. The platform ingests architectural diagrams and cloud configurations, then uses AI to validate the design itself, flagging risks in real time as engineers collaborate on it. From there it auto-generates the infrastructure code and keeps the security requirements aligned as the system changes underneath it. In effect it is a security architect that sits in the design review, never gets tired and never forgets what was agreed three sprints ago.

The Funding Journey. Dawnguard has raised $10.3 million in total: a $7 million round in July 2025 and a further $3.3 million this month, led again by BNVT Capital, with eCAPITAL entrepreneurial Partners returning and Curiosity VC joining. The new money is earmarked for product development, deeper AI architecture intelligence and, notably, a serious push into enterprise go-to-market alongside a new US office.

The Traction. The company is generating revenue, has partnered with the incident-response firm Invictus, and showed up at RSA this year, which is a lot of surface area for a company barely twelve months past stealth. PitchBook's model likes it too, scoring it in the top tier of venture-backed companies for exit potential and putting a 73% probability on an eventual acquisition. That is a machine's opinion rather than gospel, but the direction of travel is clear enough.

The Takeaway. Dawnguard is a small round in a week of large ones, and that is exactly why it is worth watching. It is not trying to out-fund the giants, it is trying to move security to a stage of the process nobody else is standing in. The risk is obvious: design-time security only pays if engineering teams actually change how they work, and that is a hard habit to shift. But with a US office opening, an enterprise go-to-market build underway and a European base that keeps costs sane, this is a company positioning itself to be bought by someone bigger, and the data suggests the market agrees.

Ready to make your next move? These roles won't stay open long.

One prediction per month.

July 2026 Prediction: A private-equity firm takes a public cybersecurity company private this quarter, in a deal worth $3 billion or more, and Thoma Bravo is the likeliest name on it.

The Logic: Last quarter set it up. Private equity ran 115 cyber deals between April and June, more than any strategic buyer, as the market tipped from building companies to buying them. Consolidation at that scale is Thoma Bravo's home ground. The firm is sitting on a record fund of more than $24 billion, has just pulled back from growth equity to concentrate on buyouts, and has spent twenty years proving that more or less any cyber company valued under about ten billion dollars is fair game, from Proofpoint at $12.3 billion to SailPoint at $6.9 billion to Darktrace at $5 billion. Public cyber valuations have slid well off their peaks, which is exactly the setup private equity waits for: profitable businesses the market has stopped rewarding, cheaper to buy and easier to fix out of the public eye. Keyfactor taking a billion dollars from Summit Partners this month is the same thesis at work in the private markets. What could prove us wrong is timing, since take-privates take months to line up and the next one could just as easily slip into Q4, which is exactly what makes calling it for this quarter bold.

Prediction Tracker

Note on the June call: we named Oasis Security and Token Security as the obvious independent targets. Cyera bought Oasis this month. The thesis holds, the shelf is just emptying faster than expected.

Have market intelligence to share? Our network sees deals before they're announced, hiring freezes before they're public, and technology shifts before they hit the headlines.

Send us your tips:

Email: [email protected]
All sources protected. We verify before we publish.