The cybersecurity vendor says its deal for the six-year-old company will augment its platform in the exposure management segment.
Tenable announced Wednesday it has reached a $150 million deal to acquire exposure risk management startup Vulcan Cyber.
Israel-based media outlet Calcalist had reported in December about the potential acquisition of Tel Aviv-based Vulcan, which was founded in 2018, by publicly traded Tenable.
[Related: 5 Major Security Vendors That Could Be Acquired By Private Equity]
Vulcan is a venture-backed player in the exposure risk management space, which offers capabilities around management of vulnerabilities, cloud exposures such as misconfigurations and other cyber risks.
Tenable is among the biggest names in the exposure management segment and has already been busy expanding its platform through M&A in recent years.
The vendor said in its press release Wednesday that Vulcan Cyber’s technology will augment its exposure management platform, enabling Tenable customers to “consolidate exposures across their security stack” while better prioritizing risks and simplifying remediation.
Tenable is focused on addressing the current “fragmented approach to identifying and combating cyber risk,” said Steve Vintz, co-CEO and CFO at Tenable, in a quote included in the release.
The proposed acquisition deal consists of $147 million in cash along with restricted stock units worth $3 million. Tenable expects the deal to close by the end of March.
Vulcan has raised at least $70 million in funding to date, including a $55 million Series B round that closed in late 2023.
Series Of Acquisitions
Prior M&A activity by Tenable in recent years has included the acquisition of Eureka Security, a data security posture management (DSPM) startup, in 2024 and Tenable’s $265 million acquisition of cloud identity security startup Ermetic in 2023.
At the same time, Tenable itself has been mulling a potential sale to a private equity firm or to a “strategic” buyer, Bloomberg reported in July 2024.
Tenable’s acquisition announcement for Vulcan Cyber also comes as part of the busy start to cybersecurity vendor consolidation in 2025. Other major security industry vendors to announce acquisitions this month included WatchGuard, 1Password, Veracode and Darktrace.
