Its hot hot hot in the UK this week. 35C! Which for us brits, is basically Armageddon.

How’s everyone else holding up?

On the cyber front we are back to a normal week after the bumper catch-up, and it was anything but quiet.

The consolidation we keep flagging went up a gear as Accenture spent a reported $4.1 billion in one swoop, taking a majority of Dragos and all of runZero and NetRise to stand up an operational-technology security practice, while Databricks took Panther, Cisco took WideField and Quest took Anetac.

On the funding side the money chased two themes above all, defending nations and securing AI: Dream raised $260 million at a $3 billion valuation to protect governments and critical infrastructure, Twenty took $100 million for offensive cyber, and post-quantum player EigenQ agreed to go public at $3 billion.

Underneath all of it sits the shift our Insider Insight takes on this week, cyber moving from protecting companies to protecting countries.

Let's dive in.

Accenture spends a reported $4.1B on cyber. A majority of Dragos plus all of runZero and NetRise, building an operational-technology security practice in one move.

Dream raises $260M at a $3B valuation. Sovereign, AI-driven defence for governments and critical infrastructure, from the former NSO Group chief.

Databricks buys Panther, Cisco buys WideField, Quest buys Anetac. Security-data and identity consolidation keeps rolling.

EigenQ agrees a $215M reverse merger. A post-quantum cryptography company heading for NASDAQ at a $3B valuation.

Twenty raises $100M for offensive cyber; NeuralTrust takes $20M to secure enterprise generative AI.

Four more cybersecurity companies ceased operations, including CNAPP player CloudDefense.AI. and a correction from last weeks radar.

We place a lot of commercial cyber roles, enough that we get to see something most people never do: the order in which cyber companies actually build their go-to-market teams. Not what they say they will hire, but the sequence the hires land in, across dozens of companies. That sequence turns out to be remarkably consistent, and it is one of the most useful things we know.

The first move is almost always pipeline. Before a company hires anyone to manage, market or support, it hires people to create and close opportunities. BDR’s and a first account executive come early (most of the time the AE), frequently in clusters: one company on our books this year brought on three BDR’s on a single day, well before it had anyone in marketing. The instinct is to build the top of the funnel first and worry about the rest once there is something flowing through it.

Channel and customer success tend to arrive alongside, not after. Companies selling through partners put a channel leader in early, and anything with a technical product that needs hand-holding hires customer success sooner than you might expect. Marketing, by contrast, usually comes later, often surprisingly so. At one company we worked with, the head of marketing was the sixth commercial hire of the year, months after the sales team was already in place and selling. Across all the placements we made this year, account executives were comfortably the largest group, with sales leadership next, and marketing and customer success both smaller and, tellingly, later.

The shape changes with stage. At the very earliest it is founding hires: a founding channel leader, founding account executives, a solution engineer, people who can build a motion from nothing rather than slot into one. As a company scales, the hiring shifts to geographic expansion, the same role opened again in a new region, and to specialisation, implementation and technical account management brought in to keep the customers a young sales team has just won.

That is the point, and it is the one we keep coming back to. We are not a firm that fills a role and moves on. We have watched enough cyber companies build their commercial teams to know what comes first, what comes next, and what tends to be hired too late. For a founder standing up a go-to-market motion for the first time, that sequencing is the difference between an engine that compounds and one that stalls, and knowing it cold is exactly what we are built for.

Dream
Series C, $260M (Bicycle Capital, Group 11)
Sovereign, AI-driven cyber defence for governments and critical infrastructure, built to detect and stop state-sponsored attacks across IT and OT environments. Co-founded by former NSO Group chief Shalev Hulio and ex-Austrian Chancellor Sebastian Kurz, the company tripled its valuation to $3 billion in 16 months on the back of roughly $300 million in government contracts. Other investors: Bain Capital, Tru Arrow Partners and Antler.

Category: Critical Infrastructure / Sovereign AI
HQ: Tel Aviv, Israel

EigenQ
Reverse Merger, $215M (Silicon Valley Acquisition, NASDAQ: SVAQ)
Post-quantum security company heading for NASDAQ as EIGQ at a $3 billion valuation, via a reverse merger with the Silicon Valley Acquisition SPAC. Builds post-quantum cryptographic hardware and software and quantum random-number generation for enterprise and government.

Category: Post-Quantum Security
HQ: Columbia, MD

Twenty
Series B, $100M (Accel)
Offensive cyber platform for defence missions, providing battle-tested automation and AI for real-time offensive operations, at a $900 million pre-money valuation. Other investors: Caffeinated Capital, Friends & Family Capital and Point72 Ventures.

Category: Offensive Cyber / Defence
HQ: Arlington, VA

NeuralTrust
Seed, $20M (ALSTIN Capital)
Security infrastructure for enterprises adopting generative AI, safeguarding LLM applications against attacks, data leakage and misuse. Other investors: Seaya, Kibo Ventures, VentureFriends, Finaves, EA Ventures, Plug and Play and Banco Sabadell.

Category: AI Security / GenAI
HQ: Barcelona, Spain

Trinsic
Venture Funding, $6.27M (undisclosed investors)
Digital identity verification infrastructure supporting identity wallets, reusable credentials and authentication, raised through a mix of debt, SAFEs, options and warrants.

Category: Identity Verification
HQ: Salt Lake City, UT

Tenet Security
Seed, $6M (The Westly Group, MizMaa Ventures)
Agent security platform that protects autonomous AI agents from remote attacks, using agent-side simulation to predict and contain risky agent behaviour. Other investors: Tomer Schwartz and Lior Tal.

Category: AI Agent Security
HQ: Tel Aviv, Israel

AIRGAPNET
Corporate Financing, Undisclosed
Hardware-based network isolation devices that provide physical air-gapping for critical systems.

Category: Network Isolation / OT
HQ: Neuhofen an der Krems, Austria

Bifrost
Venture Funding, $0.7M (Almi Invest, SEB)
Runtime security for containerised cloud applications, automatically building security profiles from application behaviour.

Category: Container Security
HQ: Stockholm, Sweden

Dragos, runZero and NetRise → Acquired by Accenture (NYSE: ACN)
Deal Type: Acquisition
Deal Date: June 18, 2026
Deal Size: ~$4.1B (combined)

Accenture's biggest cyber move yet, and a clear statement about where services money is going. It takes a majority stake in Dragos, the leading operational-technology and industrial-control-system security firm, plus all of runZero (asset inventory and network visibility, from Metasploit creator HD Moore) and all of NetRise (firmware and software supply-chain security). Together they hand Accenture a deep OT and exposure-management practice to sell into critical-infrastructure clients. The NetRise leg is expected to close by September.

Panther → Acquired by Databricks
Deal Type: Acquisition
Deal Date: June 16, 2026
Deal Size: Undisclosed

The data and AI platform moves into the SOC. Panther builds a cloud-native, detection-as-code SIEM and security data platform, giving Databricks a security analytics layer that runs on the same data infrastructure enterprises already use. Another data-and-AI giant pushing directly into security operations.

WideField → Acquired by Cisco Systems (NASDAQ: CSCO)
Deal Type: Acquisition
Deal Date: June 19, 2026
Deal Size: Undisclosed

Cisco keeps building in identity. WideField gives enterprises visibility into their identity attack surface, surfacing the misconfigurations and exposures that lead to identity-based breaches. It lands barely a month after Cisco bought Astrix, underlining how aggressively the networking giant is assembling an identity-security stack.

Anetac → Acquired by Quest Software
Deal Type: Acquisition
Deal Date: June 17, 2026
Deal Size: Undisclosed

Another non-human-identity tuck-in. Anetac takes a streaming approach to identity security across data centres and cloud, tracking service accounts and machine credentials in real time. Quest, itself backed by Clearlake and Bregal Sagemount, folds it in to strengthen its identity and access line, the same machine-identity gap our Bold Call is built around.

Guardrail → Acquired by Rain. AI security platform detecting attacks across the web2 and web3 stack (San Francisco).

Four cybersecurity companies went out of business this week:

CORRECTION FROM LAST WEEK

CRFQ are alive and healthy, not out of business as our intelligence foretold.

Good to hear!

Two deals defined this week, and they point in the same direction. Dream raised $260 million at a $3 billion valuation to defend governments and critical infrastructure from state-sponsored attacks. Accenture spent a reported $4.1 billion, led by its purchase of a majority stake in Dragos, to build an operational-technology security practice aimed at the same buyers. The biggest money in cyber this week was not chasing the enterprise SOC. It was chasing the defence of nations. (Tell me that’s not a cool sentence)

This shift has been building for a while and is now impossible to miss. Cyber started as an IT problem, something companies bought to protect their data and their networks. It is becoming a national-security problem, something governments buy to keep the lights on, the water running and the hospitals open. The threat landscape has moved with it. In the year to May, the UK's National Cyber Security Centre handled more than 200 incidents affecting critical national infrastructure, and it believes around three quarters were linked to state actors, naming Russia, China and Iran directly. When the targets are power grids rather than payroll systems, cyber stops being an enterprise line item and starts being a matter of sovereignty.

The capital is repricing accordingly. Operational-technology and industrial-control security, long treated as a niche, is suddenly the centre of a $4.1 billion acquisition. Sovereign cyber, the idea that a country should own and operate its own defences rather than rent them from an American or Chinese vendor, now supports a $3 billion valuation and, in Dream's case, around $300 million in real government contracts. These are defence-grade numbers, underwritten by the same logic that funds tanks and fighter jets: in a contested world, you cannot outsource your own protection.

The AI arms race sits underneath all of it. The same models that let defenders find weaknesses before attackers do also let attackers move faster and cheaper, and both sides know it. That is why so much of this money is flowing into AI-native platforms, and why the sovereignty argument has sharpened. When the US barred foreign nationals from its most capable models this month, it handed every other government a reason to want a cyber and AI stack it controls outright, a point Dream's founders have been making loudly and, for their commercial purposes, very profitably.

For our world, the practical consequence is a market splitting in two. There is commercial cyber, the enterprise tools and the go-to-market teams that sell them, which is the bulk of what we do and is not going anywhere. And there is a fast-growing national-security tier, OT and ICS security, government and defence cyber, sovereign AI, which runs on different rails: security clearances, government sales cycles, deep knowledge of industrial systems, and a tolerance for the politics that comes with selling to states. The people who can operate in that second world are scarcer, and they are getting more valuable by the month.

The Trident Take: cyber has gone from protecting companies to protecting countries, and the capital, the consolidation and the talent are all repricing around it. The enterprise SOC will keep paying the bills, but the fastest-growing and best-funded corner of this market right now is the one defending power grids, water systems and national networks. That is a structural change, not a news cycle, and it will reshape who the buyers are, where the exits come from, and which people in this industry are hardest to hire.

Website - eigenq.com

A post-quantum cryptography company founded last year, with around 16 employees and around $5 million raised, is about to go public at a $3 billion valuation. That sentence captures most of what is interesting about EigenQ.

The Founders. EigenQ was founded in early 2025 by Dr. Jesse Van Griensven Thé, a quantum computing and AI professor at Canada's University of Waterloo, who chairs the company. Day to day it is run by chief executive Dr. José R. Rosas-Bustos, previously its chief technology officer, who brings two decades in cybersecurity, a spell at Oracle and doctoral research in quantum communication. The leadership bench is unusually deep for a company this young, with a chief research officer, Mark Pecen, serving as vice chairman alongside a full slate of operating, product, revenue and growth chiefs. It is headquartered in Columbia, Maryland.

The Thesis. EigenQ is selling against one of the few genuine certainties in security: the cryptography that protects almost everything today will eventually be broken by a powerful enough quantum computer, and adversaries are already harvesting encrypted data now to decrypt it later. Governments and critical-infrastructure operators cannot wait for that day, because migrating a nation's systems to quantum-safe cryptography takes years. EigenQ's pitch is to sell the hardware and software that make the transition possible.

The Product. EigenQ builds quantum-security infrastructure: post-quantum cryptographic hardware and software, quantum random-number generators, quantum-secure communication modules and hybrid quantum-classical tools. The target customers are defence agencies, critical-infrastructure operators and large enterprises that need to keep their data intact in the face of the coming quantum threat. The company holds patents in quantum-channel authentication and is already generating revenue.

The Funding Journey. This is the part that raises eyebrows. EigenQ has raised barely $5 million to date, including a $5 million equity crowdfunding round on Republic in 2025 and a token venture round after it. Rather than raise a conventional Series A, it is going public through a reverse merger with Silicon Valley Acquisition, a listed SPAC, in a $215 million deal that values the combined company at $3 billion and will see it trade on NASDAQ as EIGQ.

The Traction. EigenQ sits inside the two categories investors most want exposure to right now, post-quantum cryptography and defence technology, and it has revenue, patents and a credible team to point to. What it does not obviously have is the scale you would normally expect under a $3 billion price tag. Sixteen employees and a SPAC listing is a lot of valuation resting on a thesis that, however real, is still early.

The Takeaway. Post-quantum security is one of the safest long-term bets in the industry, and the migration it demands is enormous, so a company selling the tools to get there has a genuine market ahead of it. Whether EigenQ is worth $3 billion today is a different question from whether the category is worth backing, and the route it has taken, a SPAC rather than a priced venture round, is one to watch closely. Either way, when a year-old quantum-security company lists at defence-tech scale, the market is telling you it has decided the quantum threat is no longer hypothetical.

Ready to make your next move? These roles won't stay open long.

One prediction per month.

June 2026 Prediction: Microsoft makes a major AI-security acquisition before the end of 2026.

The Logic: Every platform of its size has already bought its way into the layer that secures AI: Google took Wiz for $32 billion, Palo Alto took CyberArk for $25 billion, and the buying has not stopped, with Cisco taking Astrix and WideField, Snowflake taking Natoma, and Accenture spending $4.1 billion this week alone. Microsoft is the holdout. It owns the biggest enterprise identity platform in Entra and ships the most-used enterprise AI in Copilot, yet it keeps building its AI-security stack in-house rather than buying one. That is getting harder to justify when machine identities now outnumber humans by roughly 82 to 1 and the pool of independent targets is thinning fast: Astrix, Natoma and Entro already gone, and this week Quest taking the machine-identity firm Anetac. If Microsoft wants the best team rather than the leftovers, it has to move while the likes of Oasis Security and Token Security are still standing. What could prove us wrong is Microsoft's real preference for organic builds, which is exactly what makes this a bold call.

Prediction Tracker

Have market intelligence to share? Our network sees deals before they're announced, hiring freezes before they're public, and technology shifts before they hit the headlines.

Send us your tips:

Email: [email protected]
All sources protected. We verify before we publish.