Contact: Brenon Daly
The holiday shopping season kicked off last week, and for one tech sector, it was a particularly bountiful time for picking up some companies. Information security (infosec) acquirers announced an unprecedented seven transactions during the week that started on Cyber Monday. The pace represented a dramatic acceleration from the year-to-date average of just two deals announced each week.
With last week’s flurry, the number of infosec acquisitions in 2017 has already eclipsed last year’s total, even as overall tech M&A volume this year is heading for a mid-teens percentage drop from last year, according to 451 Research’s M&A KnowledgeBase. (This year already ranks as the second-busiest year for infosec, with deal volume tracking to roughly 50% higher than the start of the decade.) Probably more important than the sheer number of transactions was who was doing the dealing:
-McAfee announced its first purchase since throwing off the shackles of full ownership of Intel last year. By all accounts, McAfee’s step back into the M&A realm with cloud security startup Skyhigh Networks came at a sky-high price.
-An infrequent acquirer, Trend Micro reached for a small application security startup based in Montreal, IMMUNIO. It is only the third acquisition the Japan-based company has done since 2011.
-Thoma Bravo continued this year’s record level of infosec M&A by private equity (PE) firms, taking Barracuda Networks private for $1.6bn. The M&A KnowledgeBase indicates that 2017 is on pace for more PE purchases in this market than any year in history, likely to come in about quadruple the number of sponsor-backed infosec deals in 2012.
Expanding the timeframe beyond just last week, we see a number of other trends this year that have contributed to strong infosec deal volume in 2017, which should continue in 2018. For starters, the industry’s largest stand-alone vendor has stepped back into the market in a big way. Symantec has inked five transactions so far in 2017, more than it has done, collectively, in the previous half-decade. Meanwhile, other infosec providers have either reemerged as buyers (Juniper acquiring Cyphort after a four-year infosec M&A hiatus) or started their own acquisition program (Qualys has announced two deals in the past four months, after printing just one transaction since the company’s founding in 1999).
