June closed the quarter the way it has ran all year: AI security took the biggest cheques, identity kept consolidating, and the money at the very top got bigger while the base of the market thinned. Cyera raised $600 million, Dream took $260 million to defend nations and critical infrastructure, and Accenture spent over three billion building an operational-technology practice around Dragos.

But the story of the quarter was not any single raise. It was the balance of the market tilting, decisively, from building companies to buying them.

Below is the full June roundup, a word on why we spent so much of the quarter on the road, and the one shift that mattered most across the whole market.

Let's dive in.

Cyera raises $600M. The quarter's largest cyber round, for a data security platform, led by Accel, AT&T Ventures and Blackstone.

Dream takes $260M to defend governments and critical infrastructure, and Accenture spends over $3B to build an OT practice around Dragos.

Identity keeps consolidating. SailPoint buys Entro, Cisco buys WideField, Incode buys Identiq and 1Password buys Apono.

AI security stays on top. Ent AI ($100M), Straiker ($64M), NewCore ($66M) and NeuralTrust ($20M) all raised in June.

This month's Trident View: the quarter we spent on the road, and why face to face still wins.

This month's Insider Insight: More cyber companies were bought than built.

You can run a recruitment desk without ever leaving your chair. Calls, messages, video links, it all works, up to a point.

We do not believe in the chair.

This quarter our team was rarely in one place for long. Josh crossed the Atlantic more than once, New York included. The whole team descended on RSA in San Francisco. Liv flew out to Identiverse in Las Vegas on her own. Ben and Gareth went to Washington for Gartner. And we were back and forth to Israel more than a few times. It added up to a lot of miles.

Here is why we keep putting them in.

Recruitment is a trust business, and trust is hard to build through a screen. Sit across a table from a candidate and you learn things a phone call never tells you: how they carry themselves, how they think on their feet, whether the person on the CV is the person in the room. Walk a conference floor with a client and you understand their world in a way no written brief can capture. Meeting people in person is not a nicety. It is the job done properly.

And candidates feel the difference. The best people in cyber are not short of recruiters sliding into their inbox. What they are short of is one who has actually met them, understood what they want, and can represent them as a person rather than a profile. Ask yourself who you would rather have in your corner: someone who has only ever spoken to you down a phone line, or someone who has looked you in the eye and knows what you are really after.

That is why we get on the plane. In a market drifting steadily towards the remote and the automated, showing up in person has become rare, and rare is exactly what makes it valuable. The relationships that crack the hardest searches and land the best people are built face to face. They always have been.

We will keep flying. Because nobody, on either side of a hire, wants to be just a phone call.

Cyera
Later Stage VC, $600M (Accel, AT&T Ventures, Blackstone)
The quarter's biggest cyber raise. Cyera's platform discovers, classifies and secures sensitive data across an organisation, catching data risk and preventing breaches before they happen. Other investors: Sequoia, Redpoint and Coatue.

Category: Data Security
HQ: New York, NY

Dream
Later Stage VC, $260M (Bain Capital, Group 11)
An AI-native cybersecurity platform built to help nations and critical-infrastructure operators defend against sophisticated, state-grade attacks. Other investors: Antler and Bicycle Capital.

Category: National Security / AI
HQ: Tel Aviv, Israel

LeapXpert
Later Stage VC, $180M (Portage, Riverwood Capital)
A communications governance and archiving platform that lets enterprises use everyday messaging channels securely and in compliance.

Category: Communications Security
HQ: New York, NY

Twenty
Early Stage VC, $100M (Accel)
A cyber-warfighting platform enabling real-time offensive cyber operations for defence missions. Other investors: Caffeinated Capital and Friends & Family Capital.

Category: Offensive Cyber
HQ: Arlington, VA

Ent AI
Seed, $100M (Craft Ventures, Crosspoint Capital, Decibel)
An enterprise security platform that monitors and stops risky user and AI activity in real time.

Category: AI Security
HQ: San Francisco, CA

NewCore
Seed, $66M (CyberStarts, Evolution Equity, Index Ventures)
An identity security platform built to secure and govern both human and AI-agent identities.

Category: Identity
HQ: Tel Aviv, Israel

Straiker
Series A, $64M (Marathon Management Partners, Citi Ventures, Workday Ventures)
AI-native security for enterprise AI agents, discovering them, stress-testing them before deployment and defending them at runtime. Other investors: Bain Capital Ventures and Lightspeed. (Profiled in last week's spotlight.)

Category: AI / Agent Security
HQ: Sunnyvale, CA

Eye Security
Later Stage VC, $59.5M (Bessemer Venture Partners, J.P. Morgan Growth Equity)
Managed detection and response paired with cyber insurance, aimed at protecting small and medium-sized enterprises.

Category: MDR
HQ: The Hague, Netherlands

Aryon Security
Early Stage VC, $29M (Blumberg Capital, Brightmind Partners)
A cloud security enforcement platform that stops risky configurations before they reach production.

Category: Cloud Security
HQ: Tel Aviv, Israel

Nebulock
Series A, $25M (FirstMark Capital)
An autonomous threat-hunting platform that surfaces the false negatives other tools miss and hardens each hunt into a live detection.

Category: Threat Hunting
HQ: Boston, MA

Opal Security
Later Stage VC, $23M (Battery Ventures, Greylock)
Identity and access management built for enterprise-scale governance and compliance.

Category: Identity
HQ: New York, NY

Tolmo
Early Stage VC, $22M (Accel, Y Combinator)
Security software that detects, investigates and remediates threats across production environments.

Category: Detection & Response
HQ: San Francisco, CA

NeuralTrust
Seed, $20M (ALSTIN Capital, Banco Sabadell)
A security platform purpose-built for organisations adopting generative AI.

Category: AI Security
HQ: Barcelona, Spain

June's mid-market stayed busy: Opal, Arpio ($15M, cloud resilience), Wultra ($7.8M, post-quantum authentication), Trinsic ($6.3M, identity), Tenet Security ($6M) and Incalmo ($9.7M) all closed rounds, alongside a long tail of seed and undisclosed raises across identity, AI security and exposure management. All told, June saw more than fifty disclosed cyber venture rounds.

Dragos → Acquired by Accenture (NYSE: ACN)
Deal Type: Acquisition
Deal Date: June 2026
Deal Size: $3.25B (Dragos)

The quarter's defining strategic move. Accenture spent over three billion dollars, led by its purchase of the operational-technology security leader Dragos and rounded out with the asset-visibility platform runZero and the software-supply-chain firm NetRise, to stand up a full OT and critical-infrastructure security practice. It is the clearest sign yet that defending industrial and national infrastructure has become a business worth billions.

Entro → Acquired by SailPoint (NASDAQ: SAIL)
Deal Type: Acquisition
Deal Date: June 2026
Deal Size: $200M

Identity's hottest sub-category keeps consolidating. Entro secures the lifecycle of non-human identities and secrets, the machine credentials that now vastly outnumber human ones, and SailPoint is folding it into its identity governance platform.

Panther → Acquired by Databricks. Cloud SIEM and security analytics absorbed into the data giant.
WideField → Acquired by Cisco (NASDAQ: CSCO). Identity-incident security, Cisco's latest security tuck-in.
Apono → Acquired by 1Password. Privileged access management, extending 1Password beyond the vault.
Identiq → Acquired by Incode. A privacy-first identity network joins the verification unicorn.
EigenQ → $215M reverse merger. The post-quantum firm going public via SPAC (profiled two weeks ago).

Private equity had one of its busiest cyber quarters on record, and June was no exception.

ForeScout Technologies → PE Growth, $162.9M. The network access control and device-visibility veteran takes on growth capital.
BlockAPT → PE Growth, $134.8M. A unified, autonomous cyber-defence platform out of London.
LRQA → Backed by Goldman Sachs Asset Management and Hillhouse. The assurance and cyber-risk group changes hands.
Tehtris → Buyout. The French XDR vendor taken over by Jolt Capital.

The through-line is the same one running across the quarter: PE is rolling up the profitable, less glamorous layers of cyber, the services, assurance and managed-security firms that every organisation has to pay for.

June's shutdowns included a notable one: CloudDefense.AI, a venture-backed cloud security platform (Palo Alto, CA). Others that closed their doors:

In all, around ten cybersecurity companies ceased operations in June, part of a quarter that saw more than seventy shut down.

One number defined the quarter.

Between April and June, more cyber companies were acquired or taken private than raised venture funding at all. Across 539 cybersecurity deals, there were 217 acquisitions and buyouts, against just 180 venture and seed rounds.

For years, this industry ran on creation: new companies, new categories, new money. This quarter, it flipped to consolidation.

The split is telling. Of those 217 deals, 102 were strategic acquisitions and 115 were private-equity buyouts and growth deals. Private equity was the single most active dealmaker in cyber this quarter, out-dealing even the strategic acquirers.

The dollars were more lopsided still. Disclosed M&A and buyout value ran to roughly $24 billion for the quarter. Disclosed venture funding came to around $3.2 billion. That is not a gap, it is a chasm.

And one deal made the point on its own. ServiceNow's $7.75 billion purchase of Armis was worth more than double every venture round in the quarter combined. Add Accenture's $3.25 billion for Dragos, SailPoint buying Entro, Databricks taking Panther, Cisco taking WideField and 1Password taking Apono, and the direction is unmistakable. The big money in cyber is no longer chasing the next startup. It is buying the ones that already exist.

Two forces are driving it.

The platforms have decided it is faster to buy a category than build one, and they have the balance sheets to do it. Identity, OT security, exposure management and AI security are all being pulled into a handful of giants.

Private equity is doing the quieter work, rolling up the profitable, unglamorous layer of the market: the assurance firms, the managed services, the audit and compliance businesses that every company has to pay for.

Underneath all of it sits the hardest number of the quarter. Seventy-three cyber companies ceased operations, roughly six a week. The headlines capture the winners; the base of the market is thinning fast.

Even the funding that did happen was concentrated. Around 86% of every venture dollar went to AI-native companies, and the ten largest rounds took roughly two-thirds of all the money raised. The median round was just $6 million. Raise big, or barely raise at all.

Put it together and the shape is clear. A few well-funded, mostly AI-native winners at the top. A wave of consolidation in the middle. A long tail quietly disappearing at the bottom. The independent, mid-stage company scaling on venture money is being squeezed from both sides.

The Trident Take: consolidation is not just a financial story, it is a talent one. When a company is acquired, teams get restructured, roles get duplicated and then cut, and some of the best people in the market come free all at once, often before anyone outside the deal knows. When a company shuts, the same thing happens with less warning. For anyone building a cyber go-to-market team right now, the acquirers and the survivors are where the durable seats sit, and the months around a deal are when the strongest talent quietly changes hands. We watch this closely, because in a consolidating market, knowing who is about to be bought, or sold, is knowing who is about to be hiring, and who is about to be looking.

Ready to make your next move? These roles won't stay open long.

One prediction per month.

July 2026 Prediction: A private-equity firm takes a public cybersecurity company private this quarter, in a deal worth $3 billion or more, and Thoma Bravo is the likeliest name on it.

The Logic: Last quarter set it up. Private equity ran 115 cyber deals between April and June, more than any strategic buyer, as the market tipped from building companies to buying them. Consolidation at that scale is Thoma Bravo's home ground. The firm is sitting on a record fund of more than $24 billion, has just pulled back from growth equity to concentrate on buyouts, and has spent twenty years proving that more or less any cyber company valued under about ten billion dollars is fair game, from Proofpoint at $12.3 billion to SailPoint at $6.9 billion to Darktrace at $5 billion. Public cyber valuations have slid well off their peaks, which is exactly the setup private equity waits for: profitable businesses the market has stopped rewarding, cheaper to buy and easier to fix out of the public eye. With a fund that size and a quarter of momentum behind it, another multi-billion take-private looks less like a question of if than of which name gets called. What could prove us wrong is timing, since take-privates take months to line up and the next one could just as easily slip into Q4, which is exactly what makes calling it for this quarter bold.

Prediction Tracker

Have market intelligence to share? Our network sees deals before they're announced, hiring freezes before they're public, and technology shifts before they hit the headlines.

Send us your tips:

Email: [email protected]
All sources protected. We verify before we publish.