Google is buying cybersecurity firm Mandiant for $5.4 billion


«The acquisition of Mandiant will complement Google Cloud’s existing strengths in security,» Google and Mandiant said in a joint statement Tuesday. «Combined with Google Cloud’s cloud-native security offerings, the acquisition will help enterprises globally stay protected at every stage of the security lifecycle.»Google Cloud is central to the company’s broader efforts to diversity its revenue beyond its core search advertising business. Although Google Cloud sales have grown at a fast clip, it has struggled to compete with similar services from Microsoft (MSFT) and Amazon (AMZN).Microsoft was also rumored to be looking to acquire Mandiant, a firm that focuses on threat intelligence, incident response and cybersecurity testing. Mandiant has been credited with uncovering the Solar Winds hack, a devastating breach that impacted a number of federal agencies and private businesses.

Jeff Pollard, VP and principal analyst at Forrester, said Google’s cloud business is «playing catchup to Microsoft in cybersecurity,» which forces Google «to pay a premium and be more aggressive.» With this acquisition, he said, Google has «signaled» it’s willing to do just that.

The deal comes at a time when businesses may be feeling heightened cybersecurity concerns given Russia’s war with Ukraine. In recent weeks, US officials have been warning businesses and local governments about the threat of cybersecurity attacks, given Russian hackers have previously gone after US targets.

Mandiant launched in 2004 and was bought by FireEye in 2013. It was spun out as an independent company after FireEye sold its product business last year for $1.2 billion.

Google’s acquisition is expected to close later this year.