Private equity firm Thoma Bravo said it would acquire application security testing company Veracode from Broadcom for $950 million in cash. The deal is expected to close in the fourth quarter of 2018.

Broadcom took over Veracode as part of its $18.9 billion purchase of CA Technologies, which it completed this week. CA Technologies bought Veracode in 2017, which it spun into a business unit. Using Veracode’s technology CA had released a program that provides third-party validation of a company’s security software and DevOps process.

Veracode is a software company that offers a scalable way to manage security risks across an organization’s entire application portfolio. Its software-as-a-service (SaaS) platform uses security testing and threat mitigation and combines multiple application security testing services to provide application security. It is targeted at DevSecOps professionals and teams to provide tools and software to integrate security into their development lifecycles.

Following the close of the acquisition, the current Senior Vice President and General Manager of Veracode Sam King will become the company’s CEO. According to Thoma Bravo, the acquisition will boost Veracode’s future operational and product development plans.

Thoma Bravo has been making a big play in the security software sector. It claims it has completed more than 30 acquisitions of security companies to date. This includes SailPoint, Barracuda Networks LogRhythm, Bomgar, BlueCoat Systems, SonicWall, and Entrust.

The private equity firm is not only involved in security, but also has a number of performance monitoring companies in its portfolio. Last year, Steve Shalita, VP at Pluribus and a former APM strategy advisor told SDxCentral that Thoma Bravo has made the most acquisition and consolidation moves across the board.

This includes SolarWinds, which it privatized in October 2015 and maintained until it went public again last month. It also took Riverbed Technology private in 2014 and it continues to hold it as a subsidiary. Other monitoring companies in its portfolio include Dynatrace, Compuware, Continuum, Empirix, and Infogix.