Updated:
Mandiant
Mandiant emerged as an independent cybersecurity firm founded in 2004 by Kevin Mandia, who built it into a leader in incident response and threat...
Mandiant
Mandiant emerged as an independent cybersecurity firm founded in 2004 by Kevin Mandia, who built it into a leader in incident response and threat intelligence before its acquisition by FireEye in 2013. Following FireEye's sale of its product business to Symphony Technology Group in 2021, Google acquired Mandiant for $5.4 billion in 2022, folding it into Google Cloud as a dedicated consulting and intelligence unit (per Google, 2022). The firm's core offerings span incident response, compromise assessments, strategic crisis communications, and cyber risk management, delivered through retainers that promise 2-hour response times. Its intelligence unit tracks more than 1,000 threat actors and publishes the annual M-Trends report on attacker behavior. Mandiant now also applies AI to defense — securing client AI systems and battle-testing them against model-specific attack vectors — while maintaining a Google Cloud partnership that extends to all major cloud providers. Named engagement examples include work with the University of California, Riverside, Dunelm, and Lloyds Banking Group, with operations covering North America, Europe, and the UK. Mandiant is headquartered in Reston, Virginia, with additional offices globally under Google Cloud's umbrella. The firm retains its own brand identity and publishes the Defender's Advantage framework and the Cybersecurity Forecast 2026. It does not operate as an investment vehicle or asset manager; Mandiant is a wholly owned operating unit of Google Cloud. M-Trends 2026 was published in early 2026, continuing the firm's annual cyber threat report series (per Mandiant, 2026). Mandiant's structural differentiator is its integration into Google Cloud while retaining independent threat-intel and consulting operations — a hybrid model that combines the scale and AI infrastructure of a hyperscaler with the specialized frontline credibility of a standalone security firm. Its governance under Alphabet's cloud leadership separates it from most cybersecurity consultancies, which typically lack a parent cloud platform.
General information
Firm type
other
Year founded
2022
AUM
Undisclosed
Location
Region
North America
Country
United States
City
Reston
Corporate office
Reston, VA, United States
Principals
Luke McNamara
CTO
Sector focus
Frequently asked questions
Who runs investment decisions at Mandiant?
Mandiant is not an investment firm. It is a cybersecurity consulting unit of Google Cloud. Kevin Mandia led the firm for two decades and through the Google acquisition; he departed in 2024. Luke McNamara serves as CTO.
How does Mandiant source proprietary threat intelligence?
Mandiant's intelligence comes from direct frontline incident response engagements — its consultants work on breaches across industries, accumulating data on attacker TTPs. That intelligence feeds the firm's tracking of over 1,000 threat actors and powers its annual M-Trends report.
Is Mandiant structured as a standalone firm or is it part of Google Cloud?
Mandiant operates as a business unit within Google Cloud, retaining its own brand and consulting practice, but integrated into Google's cloud security portfolio — including Google SecOps and the wider Google Threat Intelligence ecosystem.
Does Mandiant invest in or fund external security companies?
No. Mandiant is a consulting and threat-intelligence services provider, not a venture capital or investment arm. Any investment activity related to cybersecurity would fall under other Google Cloud or Alphabet entities.
Which sectors does Mandiant explicitly avoid as clients?
Mandiant does not publicly disclose any sector exclusions. Its published client references include education (University of California, Riverside), retail (Dunelm), financial services (Lloyds Banking Group), and telecommunications (AT&T).
How is Mandiant related to FireEye?
Mandiant was acquired by FireEye in 2013. FireEye subsequently sold its products business to Symphony Technology Group in 2021 and renamed itself Mandiant. Google then acquired the resulting company in 2022. FireEye no longer exists as a separate entity.
What is Mandiant's known posture on hiring from military or intelligence agencies?
Mandiant historically recruited heavily from U.S. defense and intelligence agencies, including the NSA and FBI, for its threat intelligence and incident response teams. This practice was established under founder Kevin Mandia and continues under Google Cloud.
Profile maintained by Altss using OSINT (open-source intelligence), regulatory filings, licensed data partners, and verified direct submissions. Read the methodology. Last updated: . Continuous refresh with full update cycles at least every 30 days.
Need institutional-grade insight on family offices?
Altss delivers:
Prefer a guided tour?
We’ll walk you through: