Is Cybereason still an independent company in 2026?

No. Cybereason was acquired by LevelBlue, a Dallas based MSSP, in a deal signed October 14, 2025 and completed November 25, 2025. It now operates as a wholly owned subsidiary, ending its run as a standalone cybersecurity vendor.

Did Cybereason ever go public?

No. Cybereason confidentially filed for an IPO in early 2022 targeting a roughly $5 billion valuation but scrapped those plans by late 2022 amid layoffs, and was instead sold to LevelBlue on November 25, 2025 without ever completing a public listing.

Has Cybereason had layoffs?

Yes, repeatedly. Cybereason cut about 10% of staff in June 2022 and 17% more in October 2022. Revelio Labs data shows headcount falling from 940 employees in 2023 to 552 by Q4 2025, a 41.2% decline.

Who is Cybereason's biggest competitor?

CrowdStrike and SentinelOne are most frequently cited as the incumbents Cybereason struggled to gain share against, per SecurityWeek's October 14, 2025 acquisition coverage; Microsoft Defender is also named as a dominant adjacent threat in enterprise endpoint security.

Could AI replace Cybereason's core product?

AI copilots like CrowdStrike's Charlotte AI, Microsoft Security Copilot, and Google Mandiant tools are commoditizing tier-1/2 SOC triage and alert correlation, the same workflows Cybereason's MalOp engine automated, per the evidence brief's AI exposure analysis dated 2025-2026.

Who owns Cybereason now?

LevelBlue owns Cybereason as of November 25, 2025, following a definitive agreement signed October 14, 2025. Prior investors SoftBank Corp, SoftBank Vision Fund 2, and Liberty Strategic Capital rolled their stakes into LevelBlue as part of the deal.

Cybersecurity companies · absorbed · Israel

Cybereason

cybereason.com ↗

Endpoint detection and response vendor, now absorbed into LevelBlue after a November 2025 acquisition.

Little protection left

Assessed 21 July 2026 · Evidence as of 21 July 2026

Not much stands between this business and its pressures.

On the recordSince 21 July 2026 · Checkable from mid-2026 · Every call on the record Checkpoint: LevelBlue decision on whether Cybereason stays a named flagship brand or gets folded into Trustwave's MDR stack

The call

Cybereason no longer exists as an independent company; it is now a shrinking asset inside LevelBlue with its brand future undecided.

Cybereason sold software that catches computer attacks and investigates security breaches. It lost out to bigger companies like CrowdStrike, SentinelOne, and Microsoft because those rivals built better products faster, and now AI tools are doing the same work Cybereason's software did. The only part of Cybereason that might stay valuable is its investigation and forensics team that works for insurance companies and lawyers, but that work now belongs to LevelBlue, not to Cybereason as its own company.

Why

AI pressure: CrowdStrike Charlotte AI, Microsoft Security Copilot, Google/Mandiant. AI-native SOC tools now automate the alert triage and correlation work Cybereason's MalOp engine was built to sell. Could AI do the core job? Yes, likely.

Bigger players: CrowdStrike, SentinelOne, Microsoft Defender. These three won the EDR/XDR market outright; Cybereason lost share for years despite heavy AI marketing and near $900M raised. Could a giant copy it? Yes, easily.

What protects it. Its DFIR and forensics work needing human expert sign-off for legal chain of custody, and that value now sits with LevelBlue, not Cybereason.

What would change this call

Whether LevelBlue keeps a product publicly branded 'Cybereason' after 12 months post-close. Shows if Cybereason survives as a distinct platform or is absorbed into LevelBlue/Trustwave MDR.
Cybereason-linked headcount reported by LevelBlue or trackers like Revelio Labs over next two quarters. Further declines would confirm ongoing integration-driven consolidation, not stabilization.
Any LevelBlue statements or filings on Trustwave/Cybereason product-line rationalization. Would clarify whether the DFIR/forensics practice is retained while the EDR platform is retired.

Key numbers

Headcount fell 41% from 940 to 552 (Q4 2025)
Acquired by LevelBlue for undisclosed sum (Nov 25, 2025)
Raised roughly $850M to $955M total funding (Nov 2025)

Named risks

Brand and product line absorption or sunset within LevelBlue's MDR stack within 12 to 24 months. Severity: high
Continued headcount consolidation post-acquisition following 41.2% decline from 2023 to Q4 2025. Severity: high
Core EDR/XDR triage workflows commoditized by AI copilots from CrowdStrike, Microsoft, and Google/Mandiant. Severity: medium
No transparent public financials as a private subsidiary, obscuring real performance. Severity: medium
Prior governance instability including a 2025 lawsuit alleging near-bankruptcy risk. Severity: low

Rivals, as read in July 2026

Rival	Direction	Evidence
CrowdStrike	losing to	Named as incumbent Cybereason failed to gain share against, per SecurityWeek Oct 14 2025
SentinelOne	losing to	Named alongside CrowdStrike as market leader Cybereason struggled against, Oct 2025
Microsoft Defender	losing to	Cited as dominant adjacent EDR/XDR incumbent commoditizing the category, 2025 brief
Trustwave	contesting	Now a sibling brand under LevelBlue after Cybereason's own Nov 2024 merger with Trustwave collapsed by March 2025

Questions people ask

Is Cybereason still an independent company in 2026?: No. Cybereason was acquired by LevelBlue, a Dallas based MSSP, in a deal signed October 14, 2025 and completed November 25, 2025. It now operates as a wholly owned subsidiary, ending its run as a standalone cybersecurity vendor.
Did Cybereason ever go public?: No. Cybereason confidentially filed for an IPO in early 2022 targeting a roughly $5 billion valuation but scrapped those plans by late 2022 amid layoffs, and was instead sold to LevelBlue on November 25, 2025 without ever completing a public listing.
Has Cybereason had layoffs?: Yes, repeatedly. Cybereason cut about 10% of staff in June 2022 and 17% more in October 2022. Revelio Labs data shows headcount falling from 940 employees in 2023 to 552 by Q4 2025, a 41.2% decline.
Who is Cybereason's biggest competitor?: CrowdStrike and SentinelOne are most frequently cited as the incumbents Cybereason struggled to gain share against, per SecurityWeek's October 14, 2025 acquisition coverage; Microsoft Defender is also named as a dominant adjacent threat in enterprise endpoint security.
Could AI replace Cybereason's core product?: AI copilots like CrowdStrike's Charlotte AI, Microsoft Security Copilot, and Google Mandiant tools are commoditizing tier-1/2 SOC triage and alert correlation, the same workflows Cybereason's MalOp engine automated, per the evidence brief's AI exposure analysis dated 2025-2026.
Who owns Cybereason now?: LevelBlue owns Cybereason as of November 25, 2025, following a definitive agreement signed October 14, 2025. Prior investors SoftBank Corp, SoftBank Vision Fund 2, and Liberty Strategic Capital rolled their stakes into LevelBlue as part of the deal.

Timeline

2025-11-25LevelBlue completes acquisition of Cybereason, making it a wholly owned subsidiary
2025-10-14LevelBlue signs definitive agreement to acquire Cybereason
2025-05CEO Eric Gan drops lawsuit against SoftBank Vision Fund and Liberty Strategic Capital
2025-03-10Cybereason secures $120M funding; Manish Narula becomes CEO
2025-03-05CEO Eric Gan resigns amid governance dispute
2025-03November 2024 Trustwave merger agreement collapses
2025-02Eric Gan sues SoftBank and Liberty Strategic Capital alleging bankruptcy risk
2024-11Cybereason announces merger agreement with Trustwave
2024-03Dozens of employees cut in senior-level reorg
2022Cybereason confidentially files for IPO targeting ~$5B valuation, later scraps plan

Revision history

21 July 2026

First assessed. Little protection left. The text above is fixed as of this date and is not edited afterwards.

In the same band

Rising (Beijing Rising Information Technology)CyFirma Alert Logic