This week’s cybersecurity market moves underline a common theme: platforms are racing to close capability gaps while capital keeps flowing into growth and expansion.
CrowdStrike’s grab of Onum is all about data pipelines as the foundation for AI-driven SOCs, while
Okta’s planned pickup of Axiom signals how fast privileged access is evolving in the era of non-human identities. Netskope’s IPO filing shows the SASE/SSE category maturing into the public markets - even with heavy losses on the books - while HUB Cyber Security’s $20M raise reflects how AI-native infrastructure plays are finding both enterprise and crypto hooks. On the private equity side, Thoma Bravo’s $2B deal for Verint shows how analytics, risk, and security are starting to overlap.
Channel partners and MSSPs should see opportunity threaded through these shifts. Blackpoint’s integration with NinjaOne is a direct nod to MSP operational pain, cutting swivel-chair work with MDR plus endpoint automation. ArmorPoint’s tie-up with Cyware speaks to SOC fatigue by embedding context at ingestion, while Climb Channel Solutions’ distribution deal with Coro gives resellers a cleaner way to package multi-surface protection for SMBs. Whether it’s funding, acquisitions, or partnerships, the winners are positioning themselves as the connective tissue that helps providers deliver more security with less complexity.
Market Pulse: Cybersecurity Deals, Funding, and Platform Shifts
CrowdStrike to Acquire Onum:
CrowdStrike is set to acquire Onum, a real-time telemetry pipeline company, to strengthen its Falcon Next-Gen SIEM platform. The deal removes migration barriers by streaming optimized, filtered data directly into Falcon, enabling autonomous detection before information even enters the system. Onum’s stateless, in-memory architecture brings speed, scale, and cost efficiency, cutting storage needs and reducing incident response times. By embedding this capability, CrowdStrike positions Falcon not only as a SIEM but as the data foundation for AI-driven SOC transformation, giving enterprises faster, more economical, and more effective security operations.
Okta Expands into Cloud-Native PAM:
Okta plans to acquire Axiom Security, an Israel-based startup focused on cloud-native privileged access management. The deal strengthens Okta’s ability to protect high-risk accounts across SaaS, cloud, and database environments - an increasingly critical need as enterprises adopt AI agents and non-human identities. Axiom’s just-in-time access and automated approvals eliminate standing privileges, while Okta’s existing tools provide governance across hybrid environments. Together, they create a unified control plane to enforce least privilege and close gaps that traditional PAM often miss.
Netskope Files for IPO:
Netskope has filed to go public, reporting $707 million in ARR with 33% year-over-year growth. The company will trade under the ticker “NTSK” on Nasdaq but hasn’t disclosed pricing details. Despite strong growth, Netskope reported a $354.5 million loss in fiscal 2025. The IPO is less about near-term capital and more about visibility in a crowded SASE and SSE market, where Netskope competes with Palo Alto Networks, Zscaler, and Fortinet.
HUB Cyber Security Raises $20M:
HUB Cyber Security secured up to $20 million in private placement financing, more than half from existing investors, to reduce debt and expand in the U.S. The funds will support its AI-native Secured Data Fabric (SDF) platform, used by banks and government clients for compliance and security. HUB also aims to position SDF as a crypto infrastructure foundation, with MPC custody, AI-supervised compliance, and post-quantum protections. Backed by new financing and growing North American demand, HUB is pushing into larger enterprise deals and new verticals.
Thoma Bravo to Acquire Verint for $2B:
Thoma Bravo is buying Verint Systems for about $2 billion. Best known for customer engagement and workforce tools, Verint also runs a Cyber Intelligence unit focused on threat analytics, fraud prevention, and risk monitoring. The acquisition extends Thoma Bravo’s cybersecurity portfolio - already including Sophos, Proofpoint, SailPoint, and Imperva - and highlights the overlap between data analytics, workforce monitoring, and security. For MSSPs, it’s another signal of consolidation across adjacent risk and analytics markets.
Blackpoint Cyber and NinjaOne Partner:
Blackpoint Cyber and NinjaOne have formed a partnership that combines MDR with automated endpoint management. The integration is aimed at MSPs who struggle with tool sprawl, limited staff, and rising threats. By merging detection with endpoint control, the two platforms reduce swivel-chair work, speed up response, and simplify operations without adding overhead. The result is stronger defenses that fit within the real-world budgets and staffing limits of MSPs and SMBs.
ArmorPoint Integrates Cyware Threat Intel:
ArmorPoint has teamed with Cyware to embed real-time, contextual threat intelligence into its platform. Instead of raw feeds, analysts receive enriched alerts with indicators and campaign details attached at ingestion, cutting noise and manual triage. The integration brings together intelligence across SIEM, EDR, IAM, and vulnerability tools into a unified view, making it easier for SOC teams and MSSPs to prioritize action. It also lays the groundwork for automated playbooks and deeper stack-wide response.
Climb Channel Solutions Partners with Coro:
Climb Channel Solutions has partnered with Coro to expand its cybersecurity portfolio for MSPs and resellers. Coro’s unified platform covers email, endpoint, data loss, and insider threat protection, giving partners a streamlined way to serve SMBs and distributed enterprises. The partnership makes deployment and management easier for customers while helping channel partners grow recurring revenue with scalable security services.
Have news to share or just want to connect? Reach us anytime at [email protected] or [email protected].
