Datavault AI to acquire CyberCatch in US$100.5M all-stock deal
What's the deal? Datavault AIDealroom has a profile for this one. Try Dealroom →, a Nasdaq-listed data monetisation firm, has signed a binding letter of intent to acquire CyberCatchDealroom has a profile for this one. Try Dealroom → Holdings, a Canadian cybersecurity company, in an all-stock transaction valued at US$100.3M. The two companies have a 45-day exclusivity window to negotiate a definitive agreement.
CyberCatch, listed on the TSXV under the ticker CYBE, offers a patented AI-enabled SaaS platform that uses generative AI and agentic AI to verify cybersecurity controls and simulate threat-actor tactics through continuous penetration testing. After closing, it will operate as a Datavault AI subsidiary in San Diego, with founder and chief executive officer Sai Huda staying on as subsidiary president.
Why now? The deal sits at the intersection of two converging forces. First, the US Department of Defense's Cybersecurity Maturity Model Certification (CMMC) enforcement entered Phase 1 in November 2025, triggering mandatory assessments for roughly 220,000 Defence Industrial Base contractors. That creates urgent demand for compliance tools — exactly what CyberCatch sells.
Second, the global information security market is projected to hit $240B in 2026. CyberCatch is also converting its encryption technology to post-quantum cryptography, a bet that gains urgency as Google has compressed its quantum computing timeline to as early as 2029.
"Cybersecurity is no longer a separate stack from data and AI, it is the precondition for both," said Nathaniel T. Bradley, Datavault AI's chief executive officer.
What could go wrong? The binding letter of intent is not a done deal — a definitive agreement still needs to be finalised within 45 days. All-stock transactions also carry dilution risk for existing Datavault AI shareholders, and integration of two publicly listed companies across US and Canadian markets adds regulatory complexity.
CyberCatch's platform maps to frameworks like NIST and HIPAA, but compliance tools live and die by regulatory cycles. Any slowdown in CMMC enforcement could dampen the near-term revenue thesis.
The signal: Both Datavault AI and CyberCatch are classified as early-growth-stage companies on Dealroom, making this less a consolidation play between mature businesses and more a bet that bundling compliance tooling with data infrastructure can accelerate scale faster than either could alone. With CMMC Phase 1 enforcement now live and roughly 220,000 defence contractors facing mandatory assessments, the timing suggests the acquirer is banking on a regulatory tailwind to compress what would otherwise be a long go-to-market cycle.
Read more: pulse2.com
