Datavault AI Buys CyberCatch for $94.5 Million in Security Push

Datavault AI's $94.5 million all-cash acquisition of CyberCatch folds continuous agentic-AI penetration testing and quantum-resistant encryption into its data platform, a bet that enterprises will pay for security built directly into data infrastructure. The deal, announced Aug. 17, values CyberCatch at about $3.22 a share and lands as AI-enabled adversary attacks rose 89% year over year in 2025, according to CrowdStrike's 2026 Global Threat Report.

"Data monetization is only possible when data is secure, valued and scored," Nathaniel T. Bradley, chief executive officer of Datavault AI, said in the announcement.

The transaction, structured as a court-approved plan of arrangement under British Columbia law, requires approval from two-thirds of CyberCatch securityholders, the Supreme Court of British Columbia and the TSX Venture Exchange. Datavault AI will lend CyberCatch $500,000 as a secured bridge loan at 5% interest to fund pre-closing expenses. CyberCatch stock options will be cashed out at $3.22 above their exercise price, while warrant holders receive no consideration. A $4,016,250 termination fee and up to $1 million in expense reimbursement apply in certain termination scenarios.

Datavault AI shares jumped 20% on the announcement, and the deal lands in a security market Gartner projected at $213 billion in 2025 end-user spending. CyberCatch founder Sai Huda, holder of U.S. Patent No. 11,297,094 for automated continuous cybersecurity assessment, will lead the subsidiary from San Diego, reporting to Bradley.

CyberCatch's Platform Targets the Compliance Gap

CyberCatch's platform uses generative AI to confirm legally required controls are in place and calculate a Cyber Hygiene Score, then deploys agentic AI to simulate threat-actor tactics, run penetration tests and calculate a Cyber Breach Score. It tests controls from three dimensions — outside-in, inside-out and social engineering — mapped to NIST CSF 2.0, NIST 800-171, CMMC 2.0, ISO 27001, HIPAA and PCI DSS frameworks. The pitch replaces once-a-year manual penetration tests with continuous automated testing, a gap most companies cannot close with human experts. CrowdStrike's report put the average eCrime breakout time — from initial intrusion to data exfiltration — at 29 minutes, a 65% increase in adversary speed versus 2024.

Quantum Resistance Becomes a Procurement Condition

CyberCatch is converting its patent-pending MARS-MABE encryption — multi-authority, attribute-based encryption with revocation — to quantum resistance. Google has set 2029 as its internal deadline to migrate authentication systems to quantum-resistant cryptography, and Google Quantum AI research found the qubit threshold needed to break widely used elliptic curve cryptography is an order of magnitude lower than previously estimated. For Datavault AI, the acquisition positions its platform for federal and regulated-industry workloads where continuous compliance attestation against NIST, CMMC, ISO 27001, SOC 2, HIPAA and PCI DSS is increasingly a precondition for procurement, audit and renewal.

Datavault AI, listed on the Nasdaq, is betting the combined stack captures U.S. government and corporate contracts across healthcare, defense, manufacturing, financial services and energy. The deal remains conditional on financing, shareholder and court approvals, with a management information circular expected in early September and closing targeted shortly after the shareholder meeting. Whether the $94.5 million price pays off depends on how quickly CyberCatch's security layer integrates into Datavault's SanQtum-secured edge platform and converts into recurring revenue.

This article is for informational purposes only and does not constitute investment advice.