PayPal to pay $60m for Israeli security startup CyActive
Summary:CyActive's predictive cyber-defense system is the US firm's second acquisition in Israel. — In what will be its second acquisition in Israel, PayPal is set to acquire Israeli cybersecurity firm CyActive.
Context & Ripple Effects
CyActive is where PayPal's pattern of buying Israeli security capability begins: a $60m deal for a predictive cyber-defense team, and only the company's second acquisition in Israel at the time. The corpus now shows that pattern compounding — PayPal went on to buy AI-based fraud specialist Simility for $120M in cash and, six years after CyActive, paid nearly $200M for Tel Aviv-based crypto-storage firm Curv (the Curv acquisition).
Meanwhile Israel's supply side kept maturing on its own: Pcysys, which automates penetration testing for risk assessment, moved from a $10M Series A to a $25M Series B led by Insight Partners, and endpoint-security firm Cynet raised a $40M Series C aimed at North America and Europe. The CyActive deal matters as the template — small predictive-defense teams acquired early by a payments platform that treats security as build-via-acquisition.
First-order effects
- CyActive's predictive-defense team and technology move inside PayPal, extending the security stack protecting its account and transaction data.
Second-order effects
- Other payments platforms competing with PayPal face the same threat model and the same conclusion — buy predictive Israeli security talent rather than license it, as PayPal did again with Simility and Curv.
- Israeli cyber founders gain a proven exit route into payments acquirers, encouraging more startups like Pcysys and Cynet to build toward acquisition or North American expansion.
Third-order effects
- If the pattern holds, major payment networks consolidate offensive-and-defensive security capability in-house, shrinking the market for standalone point products sold to them and deepening the Israel-to-payments talent pipeline.
The trend: Payments platforms are serially acquiring Israeli cybersecurity startups — CyActive, then Simility, then Curv — to assemble proprietary defense stacks instead of buying security as a service.