Alphabet Inc. plans to acquire Mandiant Inc. for roughly $5.4 billion in a deal that could unleash a long-awaited consolidation across the cybersecurity industry.
The Google parent company announced Tuesday morning that it intends to purchase Mandiant
for $23 a share in cash, with plans to integrate the company into Google Cloud. Mandiant shares were down 2.2% in Tuesday trading, to about $22, after gaining 16.1% in Monday’s session following a report from The Information saying that deal talks were ongoing. Shares are up roughly 45% since the start of February, after being boosted by an earlier report about acquisition interest from Microsoft Corp.
Wedbush analyst Dan Ives believes that Microsoft is not dropping out of the game, however.
“We believe this deal will have a major ripple impact across the cybersecurity space as cloud stalwarts Amazon
will now be pressured into M&A,” Wedbush analyst Dan Ives wrote.
The cybersecurity industry has long been seen as a tech sector in need of consolidation, as companies are forced to sign up with dozens of vendors for different security products for different needs. Cybersecurity professionals are in short supply, leaving large security operations like Cisco Systems Inc.
desperate for talent as they attempt to cobble together products that address the variety of security problems.
Among public takeover candidates, Ives sees Varonis Systems Inc.
Tenable Holdings Ltd.
CyberArk Software Ltd.
SailPoint Technologies Holdings Inc.
and Ping Identity Holding Corp.
as “standout” names.
Read: ‘The Cold War was over, I think it’s restarted’ — Putin’s cyberwar judo tactics, and how to deal with fear of hacks
RBC Capital Markets analyst Matthew Hedberg wrote that he was “bullish on the cybersecurity industry as we believe spending intentions and the strategic relevancy of the group remains at elevated levels,” though he took a more tempered view on the prospect of further big mergers.
“While we don’t believe this necessarily forces other large technology vendors to follow suit with a large cybersecurity acquisition in the short-term, we believe it further illustrates the importance of cybersecurity in a cloud-first world and expect both large and small technology vendors to continue to invest (both organically and inorganically) to take advantage of strong market tailwinds,” RBC Capital Markets analyst Matthew Hedberg wrote.
expects that Mandiant will be complementary to the existing security offerings housed in Google Cloud, if the company can win approval for the deal amid antitrust scrutiny.
“With the addition of Mandiant, Google Cloud will enhance these offerings to deliver an end-to-end security operations suite with even greater capabilities to support customers across their cloud and on-premise environments,” the company said in a release.
Read: Ransomware boom comes from gangs that operate like cloud-software unicorns — ‘a truly incredible business model’
Piper Sandler analyst Thomas Champion wrote that the deal seemed to make “strategic sense” for Alphabet given that Mandiant “appears to have credible IP in security” as well as a consulting business that could help Google’s enterprise ambitions.
The deal is Google’s second-largest in its history and “well above the range of the company’s typical targets,” according to Baird analyst Colin Sebastian.
“Since Google generally prefers to build products organically, we believe this combination demonstrates how important security is for GCP [Google Cloud Platform] from a product perspective, as well as the challenges in replicating some of Mandiant’s core competencies, particularly advisory services,” he wrote.