An acqui-hire is an acquisition done mainly to retain a team’s people, skills, and working style rather than to buy a product or revenue stream. In practice, the buyer is purchasing expertise: engineers, researchers, operators, or security specialists who can accelerate a roadmap immediately.
In cyber security, acqui-hires matter because talent is a control surface. A team may bring strong secure-coding habits, threat-hunting knowledge, or cloud-hardening experience, but it can also inherit risk if identities, laptops, secrets, and access paths are not revalidated after the deal closes. Defenders use acqui-hires to add scarce security capability quickly; attackers may try to exploit the merger period with phishing, privilege confusion, or forgotten accounts left in old systems. Good integration means mapping access, resetting trust boundaries, and aligning the new team’s workflows with the buyer’s governance and incident-response process.