Cybereason Due Diligence

Run due diligence on Cybereason: check compliance and get alerts when suppliers change.

United States · www.cybereason.com · 13 vendors

Cybereason is a cybersecurity company that provides endpoint prevention, detection, and incident response solutions. It offers an AI-driven platform to detect and mitigate advanced cyber threats, including ransomware, across endpoints, servers, and cloud environments, aiming to streamline security operations and reduce response time.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 13 sub-vendors.

Insights

Last updated 2026-05-04 · revision 2

13 direct vendors, 191 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

4 in-scope frameworks identified; showing 3.

GDPR (source) — Evidence found

Evidence: https://www.cybereason.com/privacy-notice, https://www.cybereason.com/security, https://www.dataprivacyframework.gov/

SOC 2 (source) — Evidence found

Evidence: https://www.cybereason.com/security

ISO 27001 (source) — Evidence found

Evidence: https://www.cybereason.com/security, https://www.cybereason.com/hubfs/dam/images/images-web/certifications/ISO_IEC%2027001_2022%20Cybereason%20Inc.pdf

Financials

Three-year financials

Financial Resilience Score: 4/10

Cybereason raised over $1B in total venture and growth equity across its lifetime, achieving a peak valuation of approximately $3.0B in mid-2021. The company demonstrated strong technology recognition, consistent Gartner/Forrester/MITRE accolades, and established a dominant position in the high-value Japanese cybersecurity market — all of which provided meaningful commercial resilience and strategic asset value. Deep-pocketed backers, particularly SoftBank across multiple rounds, provided substantial runway and global expansion capability. However, the company was persistently unprofitable throughout its operating life, burning significant cash in pursuit of growth. The failure to complete a planned IPO in 2021, followed by a deteriorating funding environment in 2022, severely constrained its strategic options. Multiple rounds of layoffs (2022 and 2023, totalling an estimated 10–15% or more of peak workforce), leadership changes, and an extended strategic review period all signal deep financial stress and an inability to reach standalone profitability. The eventual acquisition by LevelBlue — at an undisclosed price widely believed to represent a substantial markdown from the $3.0B peak valuation — confirms that investors did not recover full value. Heavy concentration of funding from a single investor family (SoftBank) created structural vulnerability when SoftBank itself faced portfolio pressures post-2022, limiting Cybereason's ability to raise bridge capital on favourable terms. Overall, while the underlying technology and Japan market position provided genuine strategic value, the financial profile is characterised by deep losses, a failed public exit, significant valuation erosion, and ultimate dependence on an acquirer for survival — placing the company in the lower half of the financial resilience spectrum.

Key strengths: Raised over $1B in total venture and growth equity across lifetime, Peak valuation of ~$3.0B in mid-2021 backed by SoftBank, Liberty Strategic Capital, and CRV, Dominant market position in Japan (~30–40% of estimated revenue), a high-margin strategic asset, Recurring subscription-based XDR/MDR/EDR revenue model providing predictability and customer stickiness, Strong technology recognition: Gartner, Forrester, and 100% detection rate in MITRE ATT&CK 2025 Enterprise evaluation, Strategic acquisition by LevelBlue ensures platform and customer continuity post-2025

Risk factors: Persistent and deep operating losses throughout entire operating life; never reached profitability, Failed IPO: S-1 never filed despite public discussions in 2021; IPO shelved amid 2022 market downturn, Significant valuation markdown: LevelBlue acquisition price undisclosed but widely believed to be far below $3.0B peak, Multiple layoff rounds in 2022 and 2023 (estimated 10–15%+ of peak ~1,500 workforce), causing organisational instability, Heavy funding concentration in SoftBank family of funds, creating vulnerability to single-investor portfolio pressures, Intense competitive pressure from CrowdStrike, SentinelOne, Microsoft Defender, and Palo Alto Networks — all with larger balance sheets, No audited public financials ever disclosed; opacity limits investor and customer confidence assessment, Leadership instability: CEO Eric Gan replaced during 2023 restructuring period

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report