LevelBlue to Acquire Cybereason, Expands MSSP Reach, Strengthens Managed Security and XDR Portfolio

LevelBlue is set to acquire Cybereason, with the deal bringing together two well-known players - one with deep XDR and incident response expertise, the other with broad MDR reach and AI-driven operations. For enterprises and partners, this unifies threat detection, response, and intelligence under one structure that aims to cut down complexity while improving visibility and speed.

Cybereason is best known for its XDR platform and deep expertise in digital forensics and incident response. Its research and threat intel teams have consistently delivered clear insight into attacker behavior and emerging threat patterns. The company also has a solid presence in Japan and other regions where enterprise demand for advanced security services continues to rise. For LevelBlue, which has been steadily growing through its acquisitions of Trustwave and Stroz Friedberg, bringing Cybereason into the fold is a natural next step - broadening both its technical capabilities and its global footprint.

LevelBlue’s direction has been consistent since its spinout from AT&T: build a focused MSSP that blends platform intelligence with human expertise. The acquisition of Trustwave added mature MDR operations, FedRAMP credentials, and the SpiderLabs research team. Stroz Friedberg strengthened its bench in forensics and incident response. Now, with Cybereason, LevelBlue fills one of the final gaps - advanced endpoint detection, offensive testing, and deeper analytics. Together, those capabilities create a full-service model that runs from prevention to response, helping organizations move beyond reactive defense.

The deal also brings in new investors - SoftBank Corp., SoftBank Vision Fund 2, and Liberty Strategic Capital - and adds both financial backing and strategic reach. The message is clear: cybersecurity has become infrastructure, not just IT.

For customers, the win is consolidation. Cybereason’s XDR integrated with LevelBlue’s AI-driven MDR reduces dwell time, improves visibility across endpoints and cloud environments, and speeds containment. Its forensics capabilities, paired with Stroz Friedberg’s investigative depth, create an end-to-end response framework built for real-world pressure. Combined research from Cybereason’s intelligence team and SpiderLabs adds sharper context around active threats, giving clients the insight they need to act faster.

This isn’t about getting bigger - it’s about getting clearer. The MSSP market is moving toward consolidation, integration over expansion, prioritizing unified detection, response, and resilience. LevelBlue’s acquisition of Cybereason fits that shift perfectly: fewer moving parts, more connected outcomes, and a model built around real operational continuity.ion between intelligence and action.