Mandiant, Inc. is an Americancybersecurity firm and a subsidiary ofGoogle. The company published a report in February 2013 that implicatedChina incyber espionage. In December 2013,FireEye acquired Mandiant for $1 billion. FireEye later sold its product line, name, and employees toSymphony Technology Group for $1.2 billion in June 2021. In March 2022, Google announced it would acquire Mandiant for $5.4billion. The firm was fully incorporated into theGoogle Cloud division in September 2022.[2][3]
Mandiant is the creator of OpenIOC (OpenIndicators of Compromise), an extensibleXML schema for the description of technical characteristics that identifythreats,security hackers' methodologies, and evidence of compromise. In 2012, its revenues were over $100 million, up 76% from 2011.[7]
In December 2013, Mandiant was acquired byFireEye for $1 billion.[12][13] In October 2020, the company announced Mandiant Advantage, a subscription-basedSaaS platform designed to augment and automate security response teams which combined the threat intelligence gathered by Mandiant and data from cyber incident response engagements;[14] in December, the company investigated a majorsupply chain attack throughSolarWinds software in U.S. government infrastructure.[15][16][17]
In May 2021, Mandiant was contracted to assist in the response to a ransomware incident impactingColonial Pipeline, a fuel pipeline operator that supplies close to half of the gasoline, diesel, and other fuels to theEast Coast of the U.S.[18][19] In June, the company was spun off FireEye as part of the latter's acquisition bySymphony Technology Group.[20][21] In August, the company acquired Intrigue, which specialized in surface management.[22]
In 2022,Axios reported that Mandiant reporters identified a pro-China disinformation campaign targeting American voters ahead of the2022 midterm elections.[23]
On May 4, 2023, Mandiant announced its integration for MISP, Splunk SIEM and SOAR.[24]
In March 2022, it was announced that the company would be acquired byGoogle for $5.4 billion and subsequently integrated into theGoogle Cloud division.[2] Following the announcement,Fortune reported that while the deal could face antitrust scrutiny, the acquisition "could help increase competition" rather than harm it.[27]
On September 12, 2022, the deal closed and integration between Mandiant and Google Cloud began. Following the acquisition, Mandiant was allowed to maintain its brand as a subsidiary of Google Cloud.[31][32]
Since 2014, every year around autumn the company organizes a well-knowncybersecurity reverse engineering challenge called Flare-On, with participants from around the world.[33]
US$483 million (2021)