Snyk stands poised to move its developer-focused security platform into the larger cloud security market, forecast to reach $77.5 billion by 2026, with its acquisition of Fugue.

The companies did not disclose financial terms of the deal.

Fugue is a cloud security posture management (CSPM) vendor, and in October it rolled out a unified policy engine that connects cloud posture back to configuration code, using one set of policies to manage compliance and security throughout the entire software development lifecycle. In an earlier interview, Fugue co-founder and CEO Josh Stella said the unified policy engine can ensure cloud security across development and operations using 50% fewer engineering resources.

These capabilities will extend Snyk’s Developer Security Platform and enable what it calls “the industry’s first CSPM designed by and for developers.”

“Together, we’ll collectively reimagine what cloud security can and should look like for today’s modern DevSecOps teams, ensuring more secure innovation can flourish worldwide,” Snyk CEO Peter McKay said in a statement.

The combined technology also puts Snyk, riding high on an $8.5 billion valuation following a $600 million funding round late last year, in an even better position to make good on its DevSecOps domination dreams.

Fugue marks Snyk’s fifth acquisition in the last 18 months, and it follows CloudSkiff, FossID, Manifold, and DeepCode. CloudSkiff created driftctl, an open source tool for drift detection, that Snyk used to boost its Snyk Infrastructure as Code (IaC) product capabilities. FossID expanded its license compliance and C/C++ capabilities, DeepCode provided real-time semantic code analysis, and Manifold gave Snyk a cloud-native marketplace for developers.

“Building security into the fabric of software development is a big feat that has many moving pieces, that, on one hand, each require its own expertise, and on the other hand, need to be woven together into a single platform,” Snyk co-founder Guy Podjarny said in an earlier interview.

This explains Snyk’s acquisition and platform strategy, the latter of which includes products that find and fix vulnerabilities in application code, containers, infrastructure as code, and — Snyk’s original product — open source code.

All of these acquisitions also underline Snyk’s ongoing commitment to using open source for scalable and secure software development.

Fugue’s unified policy engine is based on Open Policy Agent (OPA), the open standard for policy as code and a Cloud Native Computing Foundation graduated project, along with Regula, which is Fugue’s open source implementation of OPA for IaC and cloud security.

“As we join forces with Snyk today, our founding mission — security by and for developers — doesn’t change, but expands exponentially with the scope of the opportunity in front of us,” Stella said in a statement. “We’re excited to now reach more developers in more places, helping them to not only build our future, but also successfully secure it.”