Vendor lineage
Cybereason
The endpoint detection company that found the NotPetya kill switch, raised more than $850 million, and ended inside a services company.
Cybereason was founded in 2012 by Lior Div and Yonatan Striem-Amit, incorporated in Delaware, and set up its headquarters in Boston in 2014. Its product was endpoint detection and response, later sold as extended detection and response, delivered as a platform and as a managed service; its research arm, Nocturnus, was the first to publish a vaccine for the NotPetya and Bad Rabbit outbreaks of 2017 and in 2019 reported Operation Soft Cell, a Chinese state espionage campaign against telecommunications providers.
The money was the story for a decade. SoftBank was the lead investor, Google Cloud's CapitalG put in $50 million in October 2021, and total funding passed $850 million; in February 2022 Reuters reported a planned listing at a $5 billion valuation, abandoned by October of that year, after which came successive layoffs and a headcount of about 950. Eric Gan, the chief executive who followed Div, resigned on 5 March 2025 amid a dispute with investors over funding, and Manish Narula took the role.
The ending came from the services side of the industry. On 14 October 2025 LevelBlue, the managed security provider spun out of AT&T, announced it would buy the company for its XDR, digital forensics and incident response and threat intelligence; the deal closed on 25 November 2025, with SoftBank Corp., SoftBank Vision Fund 2 and Liberty Strategic Capital becoming investors in LevelBlue as part of it. LevelBlue's site now says, in four words, Cybereason is now LevelBlue.
Why it belongs in a networking record: endpoint detection is where the network's visibility problem went after encryption closed the wire, and the fate of a well-funded product company, bought by a services company for the telemetry and the people, is the pattern of the 2020s this chronology keeps recording.
This company no longer trades under this name. Now part of LevelBlue (Cybereason is now LevelBlue).
- Wikipedia: Cybereason - founded 2012 by Lior Div and Yonatan Striem-Amit (one sentence says 2014), incorporated in Delaware, Boston headquarters from 2014; Nocturnus and the NotPetya vaccine; Operation Soft Cell 2019; CapitalG $50 million October 2021; funding over $850 million; the abandoned 2022 listing; Gan's resignation 5 March 2025 and Narula; about 950 employees (read 2026-10-06)
- LevelBlue, 14 October 2025: LevelBlue to acquire Cybereason (XDR, DFIR, threat intelligence; SoftBank Corp., SoftBank Vision Fund 2 and Liberty Strategic Capital backing the transaction) (read 2026-10-06)
- LevelBlue, Dallas, 25 November 2025: LevelBlue completes the acquisition of Cybereason (read 2026-10-06)
- LevelBlue - About us: 'Cybereason is now LevelBlue'; 'LevelBlue SpiderLabs' (read 2026-10-06)