Google has agreed to acquire cybersecurity company Mandiant for approximately $5.4 billion in cash, making one of its largest acquisitions a direct bet that security services will become a critical differentiator in the competition among global cloud-computing platforms.

The deal, announced Tuesday, values Mandiant at $23 per share and is expected to place the company inside Google Cloud after regulatory and shareholder approvals. Google said in its announcement that Mandiant’s threat intelligence, incident response and security consulting capabilities would complement its existing cloud-security products.

Mandiant became one of the best-known names in enterprise cybersecurity through investigations of major breaches and state-backed hacking campaigns. Its role in uncovering the SolarWinds compromise gave the company particular visibility among corporate security teams and government agencies.

Google buys expertise, not just software

The acquisition is notable because Mandiant’s value is not limited to a single security product. The company operates incident-response teams that enter organizations after major intrusions, threat-intelligence services that track hostile actors and consulting practices that help companies prepare for and recover from attacks.

Mandiant disclosed the transaction in an SEC filing, documenting the merger agreement and financial terms. The all-cash structure provides a clear exit for shareholders while leaving Google to integrate a business built partly around highly specialized human expertise.

TechCrunch reported that the transaction follows a period of consolidation in cybersecurity as major technology vendors seek broader platforms rather than collections of individual point solutions. Google’s move gives it a recognizable incident-response brand that can be offered alongside infrastructure and data services.

Cloud competition increasingly depends on security

Amazon Web Services, Microsoft Azure and Google Cloud are competing for large enterprise and government workloads that often involve sensitive data and regulated operations. Security is therefore not merely an add-on feature; it can determine whether an organization is willing to move critical systems into a provider’s cloud.

The acquisition could help Google make a stronger case to customers that want both preventive controls and help when those controls fail. Mandiant’s teams can investigate breaches across on-premises networks, multiple clouds and third-party systems, potentially giving Google visibility into threats beyond its own infrastructure.

Axios reported that the deal would deepen Google’s security portfolio at a time when cyberattacks are increasingly a board-level risk. Ransomware, supply-chain compromises and state-backed operations have raised spending on security even as organizations struggle with shortages of experienced personnel.

The geopolitical environment is adding urgency. Russia’s invasion of Ukraine has been accompanied by cyber operations and heightened warnings that Western companies and infrastructure operators should prepare for possible retaliatory attacks. Forbes noted that the transaction arrives as technology leaders brace for more intense digital threats tied to the conflict.

Mandiant has been reshaping itself

Mandiant’s current form follows the sale of the FireEye products business to a consortium led by Symphony Technology Group. That separation allowed Mandiant to focus more narrowly on threat intelligence, incident response and managed security services under its original name.

For Google, that narrower company may be easier to integrate strategically. Instead of acquiring a large portfolio of appliances and legacy products, Google is buying capabilities that can be layered onto cloud services and security operations.

Bloomberg reporting described the acquisition as part of Google’s effort to strengthen its cloud division against larger rivals. Google Cloud continues to grow rapidly but remains smaller than Amazon and Microsoft in global infrastructure services.

That competitive gap makes differentiated services valuable. If Mandiant can help Google win complex, security-sensitive customers, the acquisition could have an impact beyond Mandiant’s standalone revenue.

Integration will determine the value of the deal

The challenge will be preserving Mandiant’s credibility as an independent security adviser while making it part of a major cloud vendor. Incident-response customers may operate heavily on Amazon, Microsoft or private infrastructure and will expect Mandiant to investigate problems without bias toward Google products.

Reuters reported that the acquisition is expected to close later this year, subject to customary conditions. Regulators will also review another large technology transaction during a period of unusually intense antitrust scrutiny.

The deal follows a broader pattern in which cloud providers are expanding deeper into cybersecurity. Microsoft has built a large security business around identity, endpoint protection and cloud monitoring. Amazon continues to add native controls and partner integrations. Google has made earlier security acquisitions and investments but is now committing billions to a company whose brand is associated with some of the most consequential breach investigations of the past decade.

Engadget reported that Google sees Mandiant as part of an end-to-end security offering rather than a stand-alone acquisition. The strategy reflects an enterprise reality: customers increasingly want security tools that work across the entire technology stack and teams that can respond when automated defenses fail.

For Google Cloud, the $5.4 billion price is a wager that trust, threat intelligence and incident response can help close a competitive gap in cloud computing. For the broader industry, it is another sign that cybersecurity is becoming one of the central arenas in which the largest technology platforms will compete.