.jpg)
LevelBlue, the world’s largest pure-play provider of managed security services (MSSP), has announced a definitive agreement to acquire Cybereason, a prominent cybersecurity firm recognized for its advanced Extended Detection and Response (XDR) platform, elite threat intelligence, and digital forensics and incident response (DFIR) capabilities.
This strategic acquisition aims to expand LevelBlue’s global leadership across Managed Detection and Response (MDR), XDR, Incident Response, and Threat Intelligence. By merging LevelBlue’s existing AI-powered MDR offerings with Cybereason's deep expertise, the combined entity will provide clients and strategic partners with a unified security platform, delivering stronger threat detection, faster response times, and broader global coverage to combat complex cyber threats. This move is designed to simplify security operations for organizations while significantly reducing operational complexity and risk.
MSSP Market Consolidation: LevelBlue, the largest pure-play MSSP, is acquiring XDR and DFIR leader Cybereason to solidify its position as the most complete cybersecurity partner.
Unified Security Offering: The deal combines LevelBlue's AI-powered MDR with Cybereason’s world-class XDR and DFIR capabilities for a proactive, scalable, and unified protection model.
Enhanced Global Reach: The acquisition expands LevelBlue’s footprint and delivery capacity, particularly by leveraging Cybereason’s strong market presence in Japan.
Key Investor Support: SoftBank Corp., SoftBank Vision Fund 2, and Liberty Strategic Capital will become investors in LevelBlue, reinforcing confidence in the long-term vision.
New Board Appointment: Former U.S. Treasury Secretary Steven T. Mnuchin is set to join LevelBlue’s Board of Directors, bringing strategic experience in finance and government policy.
End-to-End Resilience: The combined company offers end-to-end security services, from offensive security (penetration testing) and risk assessments to continuous detection engineering and monitoring.
This acquisition marks a major step in LevelBlue’s strategy to unite leading organizations, technologies, and talent into one integrated security partner. It follows recent acquisitions of Trustwave and Stroz Friedberg, further accelerating LevelBlue’s evolution from reactive defense to proactive cyber resilience.
Bob McCullen, CEO and Chairman of LevelBlue, underscored the strategic value of the deal, stating, “The addition of Cybereason is a strategic leap forward in our mission to become the most complete cybersecurity partner for our clients and strategic partners. By combining Cybereason’s world-class XDR and DFIR capabilities with our AI-powered MDR and incident response, we can deliver unified protection that’s proactive, scalable, and purpose-built for today’s fast-evolving threats.”
Manish Narula, CEO of Cybereason, highlighted the benefits for clients: “Joining LevelBlue marks an exciting new chapter for Cybereason. This acquisition strengthens our collective capabilities across XDR, MDR, offensive security, DFIR, and cybersecurity consulting services, enabling us to unlock additional value for our clients and their counsel and cyber insurance partners globally.”
LevelBlue’s consolidated portfolio will deliver immediate and measurable value by focusing on several key enhancements:
The integration of Cybereason’s advanced XDR with LevelBlue’s native MDR services (which include Trustwave’s MDR offering) will bolster endpoint security. This synergy will provide faster, more accurate detection and response, which is crucial for reducing threat dwell time and containing malicious operations before they spread across the environment.
Cybereason’s DFIR technology and services, coupled with the existing capabilities from the Stroz Friedberg acquisition, immediately extend LevelBlue’s DFIR capacity, capability, and global reach. This integration creates extensive global coverage and technology-agnostic forensic expertise, ensuring that all incidents are met with intelligence-driven speed and effective response for organizations, their legal counsel, and cyber insurance partners.
By unifying Cybereason’s research team with LevelBlue’s renowned SpiderLabs, clients will gain deeper visibility into emerging threat actors and attack techniques, alongside actionable threat intelligence. Furthermore, LevelBlue will offer a comprehensive Offensive + Defensive Synergy, providing end-to-end security services including penetration testing, risk assessments, detection engineering, and constant monitoring to help clients harden defenses and ensure operational resilience.
The acquisition is supported by major investors, with SoftBank Corp., SoftBank Vision Fund 2, and Liberty Strategic Capital becoming investors in LevelBlue, demonstrating strong market confidence in the company’s strategic vision.
Steven T. Mnuchin, former U.S. Treasury Secretary and Managing Partner of Liberty Strategic Capital, will also join LevelBlue’s Board of Directors. His appointment adds significant experience at the intersection of global finance, government policy, and strategic investment.
Steven Mnuchin remarked, “Cybersecurity is now inseparable from economic security and national resilience. LevelBlue has rapidly established itself as a leader in integrated managed security services, and I look forward to helping guide its growth at a time when organizations worldwide are seeking trusted partners who understand the complexity of today’s threat landscape. I also want to thank Manish Narula, CEO of Cybereason, for his strong leadership in driving this outcome and propelling Cybereason into its next chapter of growth and innovation.”
Shawn Hakl, Senior Vice President of AT&T Business Product and LevelBlue Board Member, also commented, “Cybereason’s strength in XDR and digital forensics is a fantastic added capability that enables us to better serve our customers with deeper threat visibility, faster response, and greater confidence in the face of evolving cyber threats. LevelBlue’s continued investment in advanced capabilities makes it an even more strategic partner for us and the organizations we support.”
LevelBlue remains committed to delivering a simplified, technology-agnostic security experience, helping clients—whether they use Microsoft, SentinelOne, or hybrid stacks—optimize their existing security investments and achieve lasting cyber resilience.
LevelBlue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world’s most analyst-recognized and largest pure-play managed security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services.
Cybereason is a leading global cybersecurity company. Cybereason provides attack protection with cutting-edge XDR and industry recognized consulting services to support organizations throughout any stage of the incident lifecycle. Cybereason’s award-winning technology and elite experts empower organizations of all sizes to harden, respond and recover from cyber threats in an ever-evolving threat landscape. Cybereason is a privately held international company headquartered in California with customers in more than 40 countries.
TechIntelPro empowers B2B technology decision-makers with the latest industry trends, deep insights, leadership perspectives and actionable intelligence to drive both organizational and professional milestones—and thrive on the tech pulse.