FireEye

FireEye
Name	FireEye
Type	Public
Industry	Cybersecurity
Founded	2004
Founder	Ashar Aziz
Hq location	Milpitas, California
Key people	Kevin Mandia (CEO)
Products	Network security, Endpoint security, Email security, Threat intelligence
Services	Incident response, Managed security services, Security consulting

FireEye. FireEye was a prominent American cybersecurity company founded in 2004, widely recognized for its advanced threat detection and intelligence capabilities. It specialized in combating sophisticated cyberattacks, particularly those involving advanced persistent threats and zero-day exploits. The company became a critical player in the global security landscape, providing products, services, and research that shaped responses to major incidents. Its evolution included significant acquisitions and a major corporate restructuring that led to the creation of separate entities for its product and services divisions.

History

The company was established in 2004 by Ashar Aziz, an engineer who sought to develop technology capable of detecting novel malware that evaded traditional signature-based detection. Initial funding came from prominent venture capital firms like Sequoia Capital and Norwest Venture Partners. It went public in 2013 with an initial public offering on the NASDAQ that valued the company highly, reflecting intense market interest in next-generation security. A pivotal moment occurred in 2016 when Kevin Mandia, founder of the incident response firm Mandiant, which had been acquired, was appointed Chief Executive Officer. This shift emphasized a focus on incident response and intelligence. In 2021, the company announced a major restructuring, selling its product business, including the FireEye name, to a consortium led by Symphony Technology Group, while its incident response and intelligence units were rebranded as Mandiant, Inc., which was later acquired by Google in 2022.

Products and services

Its core technology centered on a virtual machine-based analysis platform designed to detect advanced persistent threats by executing suspicious code in a secure, instrumented environment. This platform was deployed as network security appliances and later expanded into cloud computing environments. The company's portfolio grew to include endpoint detection and response solutions, email security gateways, and security information and event management capabilities. Its services division, greatly enhanced by the Mandiant acquisition, became world-renowned for its incident response teams, digital forensics expertise, and managed security services. These services were often engaged following major breaches at organizations like Sony Pictures and Target Corporation.

Acquisitions and subsidiaries

Growth was significantly driven by a series of strategic acquisitions. The landmark 2013 purchase of Mandiant for over $1 billion brought elite incident response and threat intelligence capabilities in-house, making the combined entity a full-spectrum cybersecurity provider. Other notable acquisitions included iSIGHT Partners in 2016, which deepened its global threat intelligence offerings, and Invotas in 2015, adding security orchestration technology. The company also acquired Cloudvisory to bolster its cloud security posture management and Verodin in 2019, gaining technology to measure security control effectiveness. These subsidiaries were integrated to create a more comprehensive platform for threat detection, validation, and response.

Security research and threat intelligence

The company maintained a large, respected team of security researchers, often publishing detailed analyses of state-sponsored cyber espionage campaigns. Its Mandiant unit gained fame for its 2013 report attributing the APT1 campaign to a specific unit of the People's Liberation Army of China. Researchers frequently uncovered critical vulnerabilities in widely used software, such as Microsoft Exchange Server, and disclosed them through coordinated responsible disclosure processes. The FireEye threat intelligence team, later operating under the Mandiant brand, tracked hundreds of threat groups, designating them with APT numbers, and provided indicators of compromise and tactical reports that were used by governments and corporations worldwide to bolster their defenses.

Notable incidents and investigations

The company was routinely called upon to investigate high-profile security breaches. Its experts led the response to the 2014 Sony Pictures hack, attributed to North Korea, and the 2013 Target Corporation data breach. In a major incident in 2020, the company itself was compromised in a sophisticated attack that leveraged SolarWinds software, leading to the theft of its red team tools. This breach had global ramifications, prompting responses from the Federal Bureau of Investigation and the Cybersecurity and Infrastructure Security Agency. The investigation into this attack highlighted the pervasive threat posed by the SVR and other nation-state actors.

Corporate affairs

Headquartered in Milpitas, California, the company operated globally with offices and response centers in major cities worldwide. For much of its history, it was a publicly traded company on the NASDAQ under the ticker symbol FEYE. Following the 2021 split, the product business operated as a private entity under Symphony Technology Group, while Mandiant, Inc. continued as a separate, publicly traded company focused on services and intelligence until its acquisition by Google. Its leadership, particularly Kevin Mandia, were frequent witnesses before Congressional committees, providing testimony on cyber threats to national security. The company also maintained partnerships with other major technology and security firms, including Microsoft and Amazon Web Services.

Category:American companies established in 2004 Category:Computer security companies Category:Companies based in Santa Clara County, California