Fidelis Cybersecurity Acquisition, Valuation, Funding & Investors

Defense Unicorns is an Austin, Texas-headquartered software firm building open-source platforms for US national security. Its UMA (Unicorn Management Architecture) enables continuous integration/deployment of mission apps in air-gapped DoD networks, supporting Kubernetes on classified clouds like IL5. Adopted by US Air Force for ABMS and JADC2 programs, the technology deploys AI models at tactical edges. Founded in 2020 by ex-Palantir engineers, Defense Unicorns collaborates with AWS GovCloud and holds CMMC Level 3 certification.

Malwarebytes is a cybersecurity company, founded in 2008, that builds software to protect consumers and businesses from malware, viruses, and other threats that evade traditional antivirus tools. Its product line has grown from a free consumer anti-malware scanner into a broader portfolio covering endpoint protection, DNS protection, cloud storage scanning, and vulnerability and patch management, sold directly and through managed service providers. The San Francisco-based company counts millions of consumer subscribers alongside tens of thousands of business customers.

Shift5 is an operational technology cybersecurity company that monitors and protects onboard systems in complex hardware environments, including military platforms, commercial aircraft, trains, and other critical transportation vehicles. Its platform analyzes serial bus traffic and radio frequency data to detect cyber threats and equipment failures in real time across aviation, rail, maritime, and ground vehicle fleets. Founded in 2018 and based in the Washington, D.C. area, the company counts Boeing, Amazon Web Services, and Booz Allen Hamilton among its partners, and serves customers spanning multiple branches of the U.S. military as well as commercial airlines.

GB Group PLC provides identity intelligence solutions through its three divisions Location, Identity, and Fraud. It offers electronic ID Verification services, ID Registration, ID Engage, and ID Trace and Investigates software and services. GB Group's technology supports customers in traditional banking, government, utilities, retail, transport, and newly emerging industries such as eCommerce, online gaming, cryptocurrency, and mobile payments. The company has a geographical presence in the United Kingdom, the United States of America, and Australia and generates revenues from the sale of software and rendering of services.

Aikido Security is a Ghent-based cybersecurity platform that unifies code scanning, cloud security, and runtime protection. Its AI-driven system automatically detects and remediates vulnerabilities across applications, infrastructure, and deployments. Engineering teams at companies like bol.com and Showpad rely on Aikido for comprehensive coverage without workflow disruptions. The platform scans repositories, containers, and cloud environments such as AWS and Kubernetes, prioritizing fixes to eliminate security debt efficiently.

Aqua Security is a Tel Aviv-headquartered provider of cloud-native application security platforms protecting containerized and serverless workloads. The Aqua Platform scans images in CI/CD pipelines, enforces runtime policies on Kubernetes clusters, and monitors hybrid clouds from AWS, Azure, and Google Cloud. Serving over 400 enterprises including Deutsche Telekom and BNP Paribas, it blocks vulnerabilities with 99 percent accuracy across development to production. Recent integrations support OpenTelemetry for threat detection in microservices architectures.

BigID is a New York-headquartered data intelligence platform that employs machine learning for data discovery, classification, and privacy management. The software supports compliance with GDPR and CCPA across petabyte-scale environments, safeguarding customer and employee data in cloud, on-premises, and hybrid infrastructures for enterprises worldwide.

BlueVoyant is a New York-based cyber defense company founded in 2017 that combines cybersecurity technology with managed services to protect organizations against internal and external threats. Its platform provides managed detection and response (MDR), third-party and supply-chain cyber risk management, digital risk protection, and incident response and threat intelligence services, delivered by teams based in the US, Israel, Europe, and Latin America. The company serves both government agencies, including the Defense Industrial Base, and private enterprises seeking to strengthen their cyber risk posture.

Bugcrowd is a San Francisco-headquartered crowdsourced cybersecurity platform that matches organizations with ethical hackers to identify vulnerabilities via AI-driven matchmaking. Established in 2012, it maintains the largest database of validated vulnerabilities and hacker profiles, supporting continuous testing programs for clients like Atlassian, Indeed, and Mastercard. Bugcrowd operates globally with penetration testing, bug bounties, and attack surface management across web, mobile, and API assets.

CHEQ is a New York-based cybersecurity company protecting brands from bots, AI agents, and online threats using a triple-layer intelligence engine analyzing over six trillion signals daily from one million domains. Trusted by more than 15,000 enterprises including Fortune 50 firms, CHEQ integrates with marketing and security tools, achieving a false positive rate below 0.009 percent. The Tel Aviv-headquartered firm operates globally to secure customer journeys.

Contrast Security is a code security platform embedding analysis and attack prevention into applications. Its deep instrumentation provides runtime protection without scans or extra infrastructure. The Bethesda-headquartered company serves enterprises securing software portfolios against known and unknown threats.

Cyberhaven is a Palo Alto-based data security company built around Data Detection and Response, tracking how sensitive data moves and transforms across cloud and on-premises environments to prevent insider threats and data exfiltration. Its proprietary Large Lineage Model analyzes data origins and workflows in real time, giving enterprises visibility and control over data even as it flows between endpoints, cloud services, and AI systems. Founded in 2016, the company addresses emerging risks such as shadow AI, where employees inadvertently share confidential information with AI tools, and counts organizations including Fox, Reddit, and SurveyMonkey among its customers.

Expel is a Herndon, Virginia-based managed detection and response provider serving enterprises with 24/7 threat monitoring across cloud, endpoints, and networks. Its platform detects incidents like ransomware, phishing, and supply chain attacks using AI alongside human analysts. Clients access the Workbench interface for live investigations into business email compromise and application compromises. Expel integrates with tools like Splunk and CrowdStrike, supporting over 100 customers including financial firms. Founded in 2015, it operates SOCs in the U.S. and Europe with ISO 27001 certification.

Halcyon is a cybersecurity company headquartered in Tel Aviv, Israel, developing AI-powered ransomware protection for enterprises. Its platform uses pre-execution detection, behavioral analysis, and decoy files across Windows, Mac, and Linux endpoints. Launched in 2021, Halcyon protects financial firms and healthcare providers in Europe and North America.

Immuta is a Boston-headquartered data security provider trusted by Fortune 500 firms and US government agencies. Its platform automates sensitive data discovery, classification, and access controls across AWS, Azure, and Snowflake. Immuta integrates with Snowflake and Databricks for policy enforcement and monitoring. Founded in 2015, it serves finance, healthcare, and defense sectors with over 50 employees.

Nsfocus Technologies Group Co Ltd is a China based internet and application security company. It offers enterprise-level network security solutions and services. The products offered by the company are Anti-DDoS system, Cloud DDoS protection service, Threat intelligence subscription service, Web application firewall, and Web vulnerability scanning system. In addition, it also offers solutions such as cloud DDoS defenses, on-premises DDoS defenses, Hybrid DDoS defenses, global threat intelligence, among others. The company has a business presence in China and other international countries.

Founded in 2000, Rapid7 is a cybersecurity company that began providing vulnerability management solutions. It has, however, expanded its portfolio to provide extended detection and response; security information and event management; cloud security, threat intelligence, and application security; and security orchestration, automation, and response. The Boston-based company went public in 2015.

Riskified Ltd has built a next-generation eCommerce risk management platform that allows online merchants to create trusted relationships with their consumers. It generates revenue by granting merchants access to its eCommerce risk management platform and reviewing and approving eCommerce transactions for legitimacy. Its merchants include some of the ecommerce brands including Wayfair, Lastminute.com, SHEIN, and Macy’s. Its merchants operate in a variety of verticals, including Payments, Money Transfer & Crypto, Tickets & Travel, Electronics, Home, Fashion & Luxury Goods, General Retail and Food. The company derived maximum revenue from Israel.