# How much GRC deal activity has been reported?

**There is evidence of substantial consolidation, but published transaction universes are broader than this desk’s enterprise-platform scope.** They should not be presented as US platform transaction totals. ([irp.cdn-website.com](https://irp.cdn-website.com/bbd57769/files/uploaded/Stax_and_Shea_2025_GRC_Market_Update.pdf))

| Coverage period | Reported activity | Source and publication context | Boundary |
|---|---|---|---|
| **2024** | **More than 50 deals; $25.7bn aggregate enterprise value** | Shea & Company/Stax, *2025 GRC Market Update* | Broad GRC taxonomy, including services and adjacent categories. ([irp.cdn-website.com](https://irp.cdn-website.com/bbd57769/files/uploaded/Stax_and_Shea_2025_GRC_Market_Update.pdf)) |
| **2025** | **At least 63 GRC acquisitions** | Herbert Smith Freehills Kramer, *Global M&A Report 2026*, checked 28 October 2026 | Broad global GRC category; not a census of enterprise platform acquisitions alone. ([hsfkramer.com](https://www.hsfkramer.com/it/insights/reports/2026/global-ma-report-2026/sector-perspectives/cybersecurity)) |
| **2026 to the research cut-off** | No reconciled sector-wide count established in this research | Selected verified announcements below | The selected list is not a market-volume estimate. |

Do not calculate a year-on-year acquisition growth rate from the first two rows: their publishers and inclusion rules differ. Likewise, aggregate enterprise value is not annual software spending, venture funding or cash available for product development.