MSSP LevelBlue to acquire Cybereason, expanding MDR and XDR capabilities. LevelBlue, the world's largest pure-play MSSP, has announced it intends to acquire MDR and XDR leader Cybereason. LevelBlue, a leading Managed Security Service Provider (MSSP) has announced it intends to acquire Cybereason, a cybersecurity vendor known for its extended detection and response (XDR) and Managed Detection and Response (MDR) solutions. The acquisition will allow LevelBlue to integrate Cybereason's XDR capabilities with LevelBlue's own AI-powered MDR and incident response solution. Terms of the deal were not disclosed publicly. "Joining LevelBlue marks an exciting new chapter for Cybereason," said Manish Narula, CEO of Cybereason. "This acquisition strengthens our collective capabilities across XDR, MDR, offensive security, DFIR, and cybersecurity consulting services, enabling us to unlock additional value for our clients and their counsel and cyber insurance partners globally." This is LevelBlue's third acquisition this year, after acquiring Trustwave and Aon's Cybersecurity & IP Litigation Consulting Groups. Cybereason was founded in 2012 and is headquartered in San Diego, California. The company has raised approximately $938 million to $970 million across multiple funding rounds and is estimated to employ up to 1,000 people. LevelBlue (formerly AT&T Cybersecurity) was launched at the RSA Conference in 2024, as a joint venture between AT&T and the cybersecurity investment firm WillJam Ventures. LevelBlue offers cyber-consulting, managed security services, and threat intelligence. Following its acquisition of Trustwave, a leading MDR provider, LevelBlue shot to become the world's largest pure-play MSSP company. LevelBlue CEO and Chairman Bob McCullen was previously a co-founder CEO at Trustwave for more than 16 years. "The addition of Cybereason is a strategic leap forward in our mission to become the most complete cybersecurity partner for our clients and strategic partners," said McCullen, LevelBlue. As part of the acquisition, LevelBlue will add SoftBank Corp., SoftBank Vision Fund 2, and Liberty Strategic Capital as investors. Steven T. Mnuchin, former U.S. Treasury Secretary and Managing Partner of Liberty Strategic Capital, will also join LevelBlue's board of directors. "LevelBlue has rapidly established itself as a leader in integrated managed security services, and I look forward to helping guide its growth at a time when organizations worldwide are seeking trusted partners who understand the complexity of today's threat landscape," Mnuchin said. This acquisition is the latest in a trend of consolidation setting the pace in the MSSP space. Joel is the Director of Content and a co-founder at Expert Insights; a rapidly growing media company focussed on covering cybersecurity solutions. He's an experienced journalist and editor with 8 years' experience covering the cybersecurity space. He's reviewed hundreds of cybersecurity solutions, interviewed hundreds of industry experts and produced dozens of industry reports read by thousands of CISOs and security professionals in topics like IAM, MFA, zero trust, email security, DevSecOps and more. He also hosts the Expert Insights Podcast and co-writes the weekly newsletter, Decrypted. Joel is driven to share his team's expertise with cybersecurity leaders to help them create more secure business foundations. Stay ahead in cybersecurity. Join thousands of IT leaders reading Decrypted every week.

US-based LevelBlue to acquire fellow cybersecurity firm Cybereason. LevelBlue has agreed to acquire Cybereason, a cybersecurity firm based in Boston and Tel Aviv that previously raised over US$900 million and was once valued at more than US$3 billion. The deal, announced October 14, 2025, will see Cybereason's extended detection and response (XDR) platform and digital forensics services combined with LevelBlue's managed security offerings. Financial details were not disclosed, but the agreement is expected to be a stock deal, with SoftBank Corp., SoftBank Vision Fund 2, and Liberty Strategic Capital becoming shareholders in LevelBlue. Steven Mnuchin, head of Liberty Strategic Capital and former US Treasury Secretary, will join LevelBlue's board. Food for thought. From ~$3B 2021 valuation to sale to LevelBlue signals sector realignment. * Cybereason's valuation peaked near $3 billion in 2021, and its IPO plans were shelved during the 2022 market downturn 1. The sale fits a wider cybersecurity shakeout 1. * SoftBank Corp., SoftBank Vision Fund 2, and Liberty Strategic Capital will become investors in LevelBlue 2. Steven T. Mnuchin will join LevelBlue's board of directors 2. * Financial terms were not disclosed 2. Managed detection and response (MDR) consolidators gain leverage as standalone extended detection and response (XDR) vendors face product rationalization. * This marks LevelBlue's third deal, following announced acquisitions of Trustwave and Aon's cybersecurity and intellectual property litigation consulting groups (Aon is a global risk and professional services firm) 3. * Cybereason has a strong presence in Japan, where it ranks among the largest providers. LevelBlue gains wider global reach and stronger regional delivery from that base 2. * Cybereason earned a perfect score in the 2024 MITRE ATT&CK Evaluations, an independent test of security products' ability to detect attacker techniques 4. The sale shows buyers favor bundled platforms with managed services as the market consolidates 4. How would you feel if you could no longer use Tech in Asia?

LevelBlue to acquire Cybereason, expanding global leadership in managed Detection and Response, XDR, incident response, and Threat Intelligence. LevelBlue, the world's largest pure-play provider of managed security services, today announced it has signed a definitive agreement to acquire Cybereason, a leading cybersecurity firm known for its advanced Extended Detection and Response (XDR) platform, elite threat intelligence team, and digital forensics and incident response (DFIR) capabilities. For clients and strategic partners, the acquisition delivers immediate value with stronger threat detection, faster response, and broader global coverage, all from a single, unified security partner. By combining LevelBlue's AI-powered capabilities and industry-leading MDR offerings with Cybereason's deep expertise, organizations can better address today's complex cyber challenges while reducing operational complexity and risk. "The addition of Cybereason is a strategic leap forward in our mission to become the most complete cybersecurity partner for our clients and strategic partners," said Bob McCullen, CEO and Chairman of LevelBlue. "By combining Cybereason's world-class XDR and DFIR capabilities with our AI-powered MDR and incident response, we can deliver unified protection that's proactive, scalable, and purpose-built for today's fast-evolving threats." As part of the transaction, SoftBank Corp., SoftBank Vision Fund 2, and Liberty Strategic Capital, known for investing in disruptive and innovative technology, will become investors in LevelBlue, underscoring strong confidence in the company's long-term strategy and vision. With global leadership in AI and next-generation technologies, the firms further bolster LevelBlue's position as a cybersecurity innovator in an increasingly complex digital landscape. Additionally, Steven T. Mnuchin, former U.S. Treasury Secretary and Managing Partner of Liberty Strategic Capital, will join LevelBlue's Board of Directors. His appointment brings decades of experience at the intersection of global finance, government policy, and strategic investment, providing valuable guidance as LevelBlue deepens its role in protecting critical infrastructure and global enterprise systems. "Cybersecurity is now inseparable from economic security and national resilience," said Steven Mnuchin. "LevelBlue has rapidly established itself as a leader in integrated managed security services, and I look forward to helping guide its growth at a time when organizations worldwide are seeking trusted partners who understand the complexity of today's threat landscape. I also want to thank Manish Narula, CEO of Cybereason, for his strong leadership in driving this outcome and propelling Cybereason into its next chapter of growth and innovation." The acquisition enhances LevelBlue's ability to deliver measurable, outcome-driven results, helping clients accelerate threat detection, reduce response times, and build long-term cyber resilience. It also marks a key step in LevelBlue's broader strategy to unite the industry's strongest organizations, technologies, and talent into one integrated partner. With recent acquisitions of Trustwave and Stroz Friedberg, LevelBlue continues to accelerate its position as the most complete cybersecurity partner for organizations looking to move from reactive defense to proactive resilience. "Joining LevelBlue marks an exciting new chapter for Cybereason," said Manish Narula, CEO of Cybereason. "This acquisition strengthens our collective capabilities across XDR, MDR, offensive security, DFIR, and cybersecurity consulting services, enabling us to unlock additional value for our clients and their counsel and cyber insurance partners globally." Expanded Capabilities and Global Reach for Clients and Strategic Partners LevelBlue's acquisition of Cybereason delivers several key enhancements for clients and strategic partners across all industries and regions: * Stronger Endpoint Security (XDR + MDR): Cybereason's advanced XDR capabilities are complementary with Trustwave's industry-leading MDR offering and bolster LevelBlue's native MDR service, providing faster, more accurate detection and response, helping clients reduce dwell time and contain threats before they spread. * World-Class DFIR Services: Cybereason's DFIR technology and services, coupled with the recent acquisition of Stroz Friedberg, immediately extends LevelBlue's capacity, capability, and reach, creating extensive global coverage, unmatched technology-agnostic forensic expertise, and intelligence-driven speed to give organizations, and their counsel and cyber insurance partners, the confidence that every incident is met with the most effective response. * Smarter Threat Intelligence: By unifying Cybereason's research team with LevelBlue SpiderLabs, clients benefit from deeper visibility into emerging threat actors and attack techniques, paired with actionable insights. * Offensive + Defensive Synergy: LevelBlue provides end-to-end security, including penetration testing, risk assessments, detection engineering, and constant monitoring, allowing clients to harden defenses while ensuring operational resilience. * Simplified, Technology-Agnostic Integration: Whether clients rely on Microsoft, SentinelOne, or hybrid stacks, LevelBlue helps optimize their existing security investments to improve their overall cybersecurity outcomes. * Enhanced Global Coverage: Cybereason's strong presence in Japan, where it is among the largest providers, expands LevelBlue's global footprint and regional delivery capabilities. "Cybereason's strength in XDR and digital forensics is a fantastic added capability that enables us to better serve our customers with deeper threat visibility, faster response, and greater confidence in the face of evolving cyber threats," said Shawn Hakl, Senior Vice President of AT&T Business Product and LevelBlue Board Member. "LevelBlue's continued investment in advanced capabilities makes it an even more strategic partner for us and the organizations we support." LevelBlue continues to redefine what it means to be a cybersecurity partner, combining platform-led services, elite human expertise, and global insight to deliver measurable outcomes and lasting resilience for clients. From mid-market enterprises to the world's most complex public and private organizations, LevelBlue offers a singular, unified security experience designed to reduce risk, increase operational confidence, and stay ahead of ever-evolving threats. Advisors on the proposed transaction include Santander and Kirkland & Ellis LLP for LevelBlue, and J.P. Morgan Securities LLC and Goodwin Procter LLP for Cybereason. The transaction is subject to customary closing conditions and regulatory approvals. Financial details were not disclosed. About LevelBlue LevelBlue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world's most analyst-recognized and largest pure-play managed security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services. Cybereason is a leading global cybersecurity company. Cybereason provides attack protection with cutting-edge XDR and industry recognized consulting services to support organizations throughout any stage of the incident lifecycle. Cybereason's award-winning technology and elite experts empower organizations of all sizes to harden, respond and recover from cyber threats in an ever-evolving threat landscape. Cybereason is a privately held international company headquartered in California with customers in more than 40 countries. View source version on businesswire.com: https://www.businesswire.com/news/home/20251014364175/en/ Business Wire, a Berkshire Hathaway company, is the global leader in multiplatform press release distribution. Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time. In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.