Welcome to our September Roundup, hope you all had a great end to Q3.

If August was about momentum, September was about survival. We tracked over 100 cyber moves this month, from billion-dollar OT validation to founders pulling the plug.

The signal is clear: consolidation is accelerating, capital is more selective, and Israel is still punching above its weight

Lets dive in.

Axonius – Later Stage VC – $80M – 9 Sep
Axonius is already one of the most established Israeli cyber vendors. Another $80M isn’t about survival unlike many of the current deals, it’s about firepower. They’re buying time to expand aggressively and maybe prep for a future public listing. It also signals investors still back the “platformization” of asset management, even as the market gets crowded.

Remedio – Growth Round – $65M (Bessemer leading) – 15 Sep
This is the old GYTPOL, rebranded and scaled up. They stayed profitable for six years before raising, which is rare. Bessemer’s check suggests device posture and auto-remediation isn’t niche anymore. Enterprises are tired of alert fatigue; they’ll pay for platforms that quietly fix issues instead of just surfacing them.

Vega – Seed + Series A – $65M (Accel leading) – 16 Sep
Vega is making the boldest swing: kill the SIEM. Their Security Analytics Mesh promises investigations without data migration, faster and cheaper. The $400M valuation out of the gate is aggressive, but it shows VCs think the SIEM model is cracked open. If they prove value quickly, legacy SIEM players may have to buy, not build.

Tenex.AI – Series A – $27M (Crosspoint Capital Partners leading) – 11 Sep
Tenex is pitching the “AI-native SOC.” Not “AI-enhanced,” but AI-first. That’s a distinction worth noting. The round is validation that automation-heavy SOC platforms are moving from hype to reality. If they can actually deliver on incident response without armies of analysts, this could be a generational shift in how SOCs operate.

KOI – Early Stage VC – $38M (Battery & Team8) – 10 Sep
Developers trust VSCode extensions blindly, and KOI spotted the hole: malicious code hidden in that supply chain. A $38M early round from Team8 + Battery suggests they’re attacking a blind spot that could explode in relevance. If developer security is the new endpoint, KOI may end up defining the category.

Sola – Series A – $36M (S32 leading) – 4 Sep
Sola’s idea is simple but powerful: let anyone customize security using natural language. With the ex-Cider team at the helm, investors are betting they can do it at Israeli speed. The bet is that security tools are too complex, and Sola wants to make them usable by non-experts.

Red Access – Series A – $17M – 10 Sep
Browsing security without agents, extensions, or network gymnastics. In a hybrid world, deployment is everything. Red Access knows most browser-security solutions die on install, and their agentless model dodges that bullet. $17M isn’t massive, but it’s the kind of foundation check that can prove market traction fast.

Mitsubishi Electric → Nozomi Networks – ~$1B – 9 Sep
Logic: Industrial giant secures OT visibility instead of building in-house.
Take: Forces Siemens, Schneider, Honeywell to respond. The OT M&A wave is officially on.

CrowdStrike → Pangea – ~$260M (reported) – 16 Sep
Logic: Extend Falcon with guardrails across prompts, agents, and model data.
Take: CrowdStrike is positioning as “SOC for AI.” Rivals will be forced to show their AI runtime controls.

Check Point → Lakera – terms undisclosed – 16 Sep (close Q4)
Logic: Foundation for a Zurich-based Global AI Security Excellence Center.
Take: A European statement play. CHKP wants to own AI safety credibility in EMEA.

CloudFirst → Performive – 11 Sep
Logic: smaller LBO consolidation.
Take: Mid-tier managed services in security are consolidating just as fast as the top end.

September wasn’t just about funding, it was also about failure. Our data tracked 15 cybersecurity companies going out of business this month, nearly equal to the number of early-stage VC rounds.

Why this matters:

The honest read: this is natural evolution. Cybersecurity is maturing like biotech, with a flood of early experimentation followed by a wave of attrition. Investors and customers are signalling: fewer, bigger bets win.

A huge month for Acquisitions. We logged 19 notable M&A deals this month, making it one of the largest category of activity.

Signals from the market:

September showed us that M&A isn’t optional, it’s survival. Whether you’re an OT vendor, an AI-security startup, or a managed service provider, you’re either buying, being bought, or falling behind.

September wasn’t just about deals, it was also a heavy hiring month for us.

Total roles: 25+

Geography: about 70% US-based, 20% Israel, 10% EU

Role mix: big wave of Founding AE searches (linked to fresh Seed and Series A raises) alongside multiple retained leadership searches.

Signals: being retained on so many searches suggests companies aren’t just opportunistically hiring, they’re making strategic GTM buildouts where execution risk is high. Boards and VCs are telling founders to “get it right the first time.”

Take: This feels like the healthiest GTM hiring market we’ve seen all year. Founding AE demand signals early-stage confidence, while retained exec searches show growth-stage firms professionalizing.

Founding Account Executive | Tel Aviv | $360K OTE
Data protection platform providing full visibility into sensitive data movement with automated leak detection and seamless deployment.
Contact: [email protected]

Account Executive | East Coast USA | $120K OTE
Growth-stage cyber vendor replicating attacker behavior to pressure test defenses. 2–3 years closing experience required.
Contact: [email protected]

Account Executive | North East USA | $280K OTE
Cyber solutions provider hiring AE for regional enterprise accounts.
Contact: [email protected]

Customer Success Manager (Junior) | East Coast USA | $120K OTE
Cyber platform hiring its first US CSM. 2–3 years of CSM experience.
Contact: [email protected]

Regional Sales Director | Benelux | $220K OTE
Greenfield project for a breach and attack simulation platform. Boots on the ground needed.
Contact: [email protected]

Account Executive | North Carolina | $280K OTE
Cyber solutions provider hiring AE for regional enterprise accounts.
Contact: [email protected]

For Security Vendors
If you’re not making life easier, you’re toast. This month showed us CISOs will pay for automation and integration, not more alerts.

For Security Vendors
The bargain bin of point solutions is closing. Push vendors for outcomes you can measure today, not promises about AI magic tomorrow.

For Investors
Follow the attrition. Startups shutting down tell you where buyers won’t spend. The winners are solving painful problems and getting rewarded with mega-rounds.

Another runtime AI security acquisition lands
Buyers are rushing to bolt on AI guardrails before year-end. CrowdStrike and Check Point moved in September, and rivals won’t want to be the only ones without a runtime AI story. Expect another grab.

A legacy SIEM vendor previews an “analyze-in-place” product
Vega’s $65M raise has painted a big neon target on SIEM. Legacy players can’t afford to look stale, so even if the tech isn’t ready, we expect at least a marketing teaser of “mesh” or “fabric” analytics from Splunk, IBM, or Exabeam.

Fraud and AML vendors announce marquee customer wins
Fintech and payments security is heating up again as fraud losses climb. With Stripe, PayPal, and banks under pressure, vendors in fraud and AML will be looking to trumpet adoption ahead of late-2025 raises.

Have market intelligence to share? Our network sees deals before they're announced, hiring freezes before they're public, and technology shifts before they hit the headlines.

Send us your tips:

Email: [email protected]
All sources protected. We verify before we publish.

The Trident Radar - Intelligence that moves faster than your competition
Delivered by Trident Search Research Desk
Editor: Ryan Keeley | London