$3.6 Billion in Crunchbase funding, $96 Billion in M&A, and 10 Agentic AI security startups Reshaping 2026
Palo Alto Networks spent roughly $29 billion acquiring three companies in 12 months. ServiceNow spent $11.6 billion on three more. Alphabet paid $32 billion for Wiz.
That is $72 billion in cybersecurity M&A from three acquirers.
The startups building agentic AI defenses raised a combined $3.6 billion. Total disclosed MCP security funding for the protocol connecting AI agents to enterprise systems: $40 million.
Then RSAC 2026 happened. Six companies announced $392 million in one week.
I analyzed Crunchbase data, CB Insights’ March 2026 Agentic AI Security Report, and Gartner’s 4Q25 AI Spending Forecast (client research). I cross-referenced every figure against company press releases and SEC filings. The $3.6 billion total is my aggregation of the top 10 startups listed below. The $96 billion M&A figure comes from Momentum Cyber’s 2025 Cybersecurity Almanac, which tracks $96 billion across 400 transactions; Momentum’s broader year-end M&A update rounds the total to $102 billion. I use the Almanac’s $96 billion, 400-transaction view throughout this analysis.
The $96 billion consolidation wave
Eight cybersecurity deals cleared $1 billion in 2025. CB Insights recorded 782 AI acquisitions, 1.5x the 2024 pace. Momentum Cyber’s year-end Almanac tallied $96 billion across 400 transactions, a 270% year-over-year increase in deal value.
Palo Alto Networks’ roughly $25 billion CyberArk acquisition closed February 2026 at a 26% premium. Add the $3.35 billion Chronosphere deal for AI-era observability and the Protect AI acquisition (widely reported in the ~$500 million range) for model security. Combined: roughly $29 billion assembled into a stack purpose-built to discover, govern, and secure AI agents.
ServiceNow spent $11.6 billion. $7.75 billion for Armis. $2.85 billion for Moveworks. Roughly $1 billion for Veza. CEO Bill McDermott called it building the AI control tower. The cybersecurity portfolio already generates $1 billion+ in annual revenue.
Two AI security acquisitions were announced in September 2025. CrowdStrike bought Pangea. Cato Networks grabbed Aim Security. F5 announced its acquisition of CalypsoAI in January 2026. Then Alphabet finalized the $32 billion Wiz deal in March 2026, the largest pure-play cybersecurity acquisition on record.
| Acquirer | Targets (deal values) | Total | Strategic Signal |
|---|---|---|---|
| Palo Alto Networks | CyberArk (~$25B), Chronosphere ($3.35B), Protect AI (est. ~$500M*) | ~$29B | Identity + observability + model security for agentic AI |
| ServiceNow | Armis ($7.75B), Moveworks ($2.85B), Veza (~$1B) | $11.6B | AI control tower. $1B+ cybersecurity ARR |
| Alphabet | Wiz | $32B | Largest pure-play cybersecurity acquisition on record. Closed Mar 2026 |
| Check Point | Lakera | Undisclosed | AI-native LLM/agent security |
*Sources: Momentum Cyber 2025 Cybersecurity Almanac (primary), company press releases, CB Insights, Reuters, CNBC. Protect AI deal value widely reported at ~$500M; this analysis uses a ~$500–700M estimated range. Moveworks is an agentic AI/workflow company with cybersecurity overlap.
$3.6 billion raised, concentrated at the top
The top 10 agentic AI security startups raised a combined $3.6 billion (my aggregation from the sources below). The distribution is brutal. Cyera accounts for $1.7 billion of that. Saviynt has raised at least $1 billion in total, including a $700 million Series B in December 2025 plus approximately $205 million in prior financing (independent tracking puts the total near $1.04 billion). Together: roughly $2.7 billion. Remove those two and the remaining eight split about $830 million.
Torq hit unicorn status in January. $140 million Series D. $1.2 billion valuation. 7AI raised the largest cybersecurity Series A in history. $130 million. $700 million valuation. Founder Lior Div started 7AI in early 2024 and launched it from stealth in February 2025 with a $36 million seed round, months before Cybereason’s acquisition by LevelBlue closed in November 2025. That kind of parallel execution, building the next company while his previous one was still navigating its fate, tells you something about how urgent the market is.
WitnessAI closed $58 million in January backed by Sound Ventures, Qualcomm Ventures, and Samsung Ventures, bringing total funding to over $85 million. Noma Security raised $100 million for AI agent hardening. The lower half of the table shows MCP security startups building on seed capital.
| Company | Total Raised | Last Round | Round Size | Valuation | Focus |
|---|---|---|---|---|---|
| Cyera | $1.7B+ | Series F (Jan 2026) | $400M | $9.0B | AI Data Security, DSPM, DLP |
| Saviynt | ~$1.0B* | Series B Growth (Dec 2025) | $700M | $3.0B | Identity Security & Governance |
| Torq | $332M | Series D (Jan 2026) | $140M | $1.2B | Agentic SOC Hyperautomation |
| 7AI | $166M | Series A (Dec 2025) | $130M | $700M | Autonomous Security Agents |
| Noma Security | $132M | Series B (Jul 2025) | $100M | — | AI Agent Security Posture |
| WitnessAI | $85.5M | Series B (Jan 2026) | $58M | — | AI Security & Governance |
| Dropzone AI | $57M | Series B (Jul 2025) | $37M | — | Agentic SOC Automation |
| Astelia | $35M | Seed + Series A (Feb 2026) | $35M | — | AI-Native Exposure Mgmt |
| Runlayer | $11M | Seed (Nov 2025) | $11M | — | MCP Security Gateway |
| Helmet Security | $9M | Seed (Dec 2025) | $9M | — | MCP Infrastructure Security |
*Sources: CB Insights March 2026, Crunchbase, Fortune, WSJ, Reuters, TechCrunch, CRN, SiliconANGLE, company press releases. Funding totals combine equity and disclosed strategic investments; some earlier rounds are approximated from multiple reports. Saviynt: $700M Series B confirmed; approximately $205M in prior financing per BankInfoSecurity, total ~$1.04B.
CB Insights Mosaic scores, 768 vs. 370
CB Insights’ AI agent tech stack analysis (August 2025, updated in the March 2026 agentic security report) tracks the category through its Mosaic scoring system. AI agent security startups average a score of 768. More than double the 370 average for all private companies in their database. The category averaged 56 points of Mosaic growth over 12 months. Zenity, WitnessAI, and TrojAI each gained 100+.
Eight companies carry top-100 scores: Cyera, Torq, 7AI, Saviynt, Noma Security, Zenity, WitnessAI, and TrojAI. CB Insights’ Mosaic scoring assigns materially elevated 2-year M&A likelihood to TrustLogix and Protecto, both early-stage with strong scores and low total funding relative to peers.
MCP security, $40 million for 17,000+ servers
This is the most critical gap in the data. The Model Context Protocol went from a niche developer tool to an enterprise integration standard in under a year. Anthropic confirmed 10,000+ active public MCP servers in December 2025; Helmet Security’s research puts the total deployed count above 17,000. ChatGPT, Cursor, Gemini, Microsoft Copilot, and VS Code all support it. The protocol was donated to the Agentic AI Foundation, co-founded by Anthropic, Block, and OpenAI, backed by Google, Microsoft, AWS, Cloudflare, and Bloomberg.
Total disclosed funding for pure-play MCP security: approximately $40 million across four startups. This total excludes undisclosed or stealth fundraising around MCP. Operant AI ($13.5 million Series A from SineWave and Felicis, raised in September 2024 before pivoting toward MCP security). Runlayer ($11 million seed from Khosla and Felicis) signed eight unicorn customers in four months. Helmet Security ($9 million from SYN Ventures) is building end-to-end MCP lifecycle protection. Manufact ($6.3 million from Peak XV and Y Combinator). According to Manufact’s YC profile, 20% of US 500 companies have experimented with its MCP infrastructure platform.
Check Point acquired Lakera, an AI-native security company founded by experts from Google and Meta. The platform vendors are buying into MCP security before the standalone startups reach Series A.
RSAC 2026, the week the dam broke
RSAC 2026 delivered a funding surge that validates every trend in this data. In the two weeks surrounding the conference (March 10–26), over $392 million in new agentic AI security funding was announced.
Oasis Security raised $120 million Series B for non-human identity and agentic access governance. Total: $195 million. XBOW raised $120 million Series C for autonomous offensive security at a $1 billion+ valuation. Moderna among 100+ customers.
Surf AI launched with $57 million. RunSybil closed $40 million, founded by OpenAI’s first security hire, angels include Nikesh Arora. Qevlar AI raised $30 million with Mercedes-Benz, Sodexo, and Orange Cyberdefense as customers. Eclypsium pulled in $25 million. Total funding: $100 million+.
Microsoft launched Agent 365 with MCP gateway at $15 per user per month, GA May 1. Google added agentic automation to Security Operations with MCP server support and Model Armor integration. Geordie AI won the RSAC Innovation Sandbox. Each Top 10 finalist received a $5 million SAFE investment funded by Crosspoint Capital as part of the contest.
| Company | Amount | Round | Lead Investors | Focus |
|---|---|---|---|---|
| Oasis Security | $120M | Series B | Craft Ventures, Cyberstarts, Sequoia, Accel | Non-human identity. Total: $195M |
| XBOW | $120M | Series C | DFJ Growth, Northzone | Autonomous offensive. Val: $1B+. Moderna among 100+ customers |
| Surf AI | $57M | Launch | Accel, Cyberstarts, Boldstart | Agentic ops for security teams. Israeli-founded |
| RunSybil | $40M | Seed/A | Khosla Ventures, S32, Anthology | AI-native offensive. OpenAI’s first security hire |
| Qevlar AI | $30M | Series A | Partech, Forgepoint Capital | Autonomous SOC. Mercedes-Benz, Sodexo, Orange Cyberdefense |
| Eclypsium | $25M | Strategic | PEAK6 Strategic Capital | AI firmware/supply chain. Total: $100M+ |
Sources: Company press releases, Fortune, BusinessWire, Morningstar/AccessWire, Eclypsium, Qevlar AI, XBOW. Exact announcement dates span March 10–26, 2026; this analysis groups them as ‘RSAC-week’ funding for simplicity.
The risks nobody is talking about
The funding data is encouraging. The M&A data is not all good news. Consolidation at this speed creates real problems for CISOs who just signed contracts with companies that no longer exist as independent entities. Protect AI’s product roadmap now answers to Palo Alto’s platform strategy, not Protect AI’s original customers. Moveworks was an agentic AI workflow company, not a pure-play cybersecurity vendor, and its integration into ServiceNow’s security portfolio is a judgment call that may or may not deliver the product its original buyers signed up for.
At the seed stage, the MCP security startups face a different risk: product-market fit at enterprise scale. Runlayer has eight unicorn customers in four months, which is impressive traction. But eight customers is not a support infrastructure, a compliance program, or a 24/7 SOC integration. Seed-funded companies building mission-critical security infrastructure for a protocol that is itself still maturing will hit scaling walls that $11 million cannot solve. Some of these startups will be acquired before they reach Series A. Others will run out of runway. CISOs evaluating them should build contingency plans for both outcomes.
What this means for CISOs
MCP security is the most urgent gap. Total disclosed MCP security funding is $40 million across four startups (Operant AI, Runlayer, Helmet Security, Manufact) for a protocol with 17,000+ deployed servers. Evaluate those four plus the MCP features shipping from Cloudflare, Wiz, Microsoft, and Google. Build vendor contingency plans alongside.
AI SOC automation is a current procurement decision. Torq ($1.2 billion valuation) and 7AI ($700 million valuation) operate at Fortune 500 scale. DXC deployed 7AI’s agentic security operation in eight weeks. 2.5 million alerts processed. 650,000+ investigations completed. RSAC adds Qevlar AI and Surf AI to the evaluation list.
Factor acquisition risk into every vendor evaluation. $96 billion+ in M&A. CB Insights assigns elevated acquisition likelihood to multiple startups in this space. Your next standalone vendor renewal could come from a platform you already pay for. Oasis Security’s $120 million raise for non-human identity confirms identity governance as the foundational layer.
The bottom line
Gartner’s 4Q25 AI Spending Forecast (client research) projects the AI Cybersecurity segment growing from $10.82 billion in 2024 to $172 billion by 2029, a 73.9% compound annual growth rate over five years. The segment reached approximately $26 billion in 2025. Agentic AI spending specifically is projected at $201.9 billion in 2026, with growth rates exceeding 100% year over year in the early years. (Note: this is a different Gartner segment than the broader AI-amplified security market, which Gartner sizes at $49 billion to $160 billion over the same period.) The top 10 startups in this analysis raised $3.6 billion. Add the RSAC wave and the total climbs further. But the agentic subcategory is still measured in hundreds of millions. Not billions.
That is the gap.
The $392 million in RSAC-week funding says the market is waking up. The capital is coming. The question is whether it arrives before the major AI-agent-driven breach that analyst firms including Forrester warn is likely in the 2026 timeframe.
*Data sources: Analysis of Crunchbase, CB Insights Early-Stage Cybersecurity Trends (Feb 2026) and Agentic AI Security Report (Mar 2026), Gartner Forecast: AI Spending 4Q25 (client research; AI Cybersecurity segment, $10.82B 2024 base to $172B 2029, 73.9% CAGR; $26B in 2025; distinct from Gartner’s broader AI-amplified security segment), Momentum Cyber 2025 Cybersecurity Almanac ($96B/400 transactions view; linked via secondary source, primary at momentumcyber.com), company press releases, SEC filings. Top 10 total ($3.6B) is author aggregation. *Saviynt: at least $1B total; ~$1.04B per BankInfoSecurity tracking. Protect AI: ~$500M widely reported; $500–700M range used. Disclosed MCP total ($40M) = Operant AI $13.5M + Runlayer $11M + Helmet $9M + Manufact $6.3M; excludes undisclosed/stealth rounds. RSAC dates span Mar 10–26; grouped as ‘RSAC-week’. Estimates as of March 28, 2026; funding rounded.
