ronutz
← Semua vendor

Vendor lineage

LevelBlue

AT&T's security services business, spun out in 2024, which bought Trustwave, Cybereason and Aon's cyber consultants inside eighteen months.

LevelBlue launched on 6 May 2024 at the RSA Conference as a standalone managed security services company, a joint venture between AT&T, which kept a minority stake and a board seat, and WillJam Ventures, whose managing partner Bob McCullen became chairman and chief executive. It began with what AT&T Cybersecurity had been: more than a thousand employees, four security operations centres and three network operations centres, the USM Anywhere platform and the Open Threat Exchange, which the launch release counted at 235,000 security professionals submitting more than 20 million threat indicators a day.

Then it bought, fast. On 1 August 2025 it completed the acquisition of Aon's cybersecurity and intellectual property litigation consulting groups; on 19 August 2025 it completed the acquisition of Trustwave, the Chicago managed security and SpiderLabs company, and called the result the world's largest pure-play managed security services provider; on 14 October 2025 it announced, and on 25 November 2025 completed, the acquisition of Cybereason, whose backers SoftBank Corp., SoftBank Vision Fund 2 and Liberty Strategic Capital became investors in LevelBlue; and on 27 January 2026 it announced a managed services partnership with Fortra that includes the acquisition of Fortra's Alert Logic managed detection and response business.

What those purchases assembled is a services company with other companies' research arms inside it: SpiderLabs now appears on LevelBlue's pages as LevelBlue SpiderLabs, Cybereason's platform as its XDR, and the Open Threat Exchange as its intelligence base. The company is run from Dallas.

Why it belongs in a networking record: the managed security provider is the form in which most organisations now consume network security, and this one is the current end of three lineages this record follows, AT&T's security business, Trustwave's twenty-year run from Chicago, and Cybereason's decade of venture funding.

Acquisitions

  1. 2025 Aon's cybersecurity and IP litigation consulting groups

    Completed 1 August 2025; the consulting practice that includes the former Stroz Friedberg expertise.

    LevelBlue newsroom, 1 August 2025 (read 2026-10-06).

  2. 2025 Trustwave

    The Chicago managed security and SpiderLabs company, founded 1995; completed 19 August 2025, terms not disclosed.

    The core of the world's largest pure-play managed security services provider, by LevelBlue's description; SpiderLabs continues as LevelBlue SpiderLabs.

    LevelBlue, Dallas, 19 August 2025 (read 2026-10-06).

  3. 2025 Cybereason

    XDR, digital forensics and incident response, threat intelligence; announced 14 October 2025, completed 25 November 2025, terms not disclosed; SoftBank Corp., SoftBank Vision Fund 2 and Liberty Strategic Capital became investors in LevelBlue.

    LevelBlue's XDR and incident response; 'Cybereason is now LevelBlue'.

    LevelBlue, 14 October and 25 November 2025 (read 2026-10-06).

  4. 2026 Fortra's Alert Logic managed detection and response business

    Announced 27 January 2026 inside a managed services partnership with Fortra; the record states the announcement, not a completion it has not read.

    LevelBlue newsroom, 27 January 2026 (read 2026-10-06).

LevelBlue ↗
From the company
Sources