Mergers & Acquisitions in the Information Security Field

I was at the Healthcare Information and Management Systems Society (HIMSS) national conference last week in Atlanta. Let's discuss.

Bugcrowd added Ben Fried—former Google CIO of 14 years and now Rally Ventures venture partner—to its advisory board, following its $102M funding round and the Informer acquisition.

Bugcrowd acquired UK-based Informer, whose external attack surface management and continuous pen testing platform will complement Bugcrowd's ASM Risk offering—its first deal after the $102M raise.

SOC2, ISO 27001, and FedRAMP serve different compliance needs, and customers increasingly demand one before doing business. This comparison clarifies what each certification covers and how to choose.

HackerOne's 2018 Hacker-Powered Security Report digest: $11M+ in bounties awarded, 78,000+ reports, hackers paid in 100+ countries, while 93% of Forbes Global 2000 still lack a VDP.

Aikido Security attained ISO 27001:2022 certification, picking the newer standard for its secure coding and threat detection controls. The six-month effort reused SOC 2 artifacts and Vanta automation.