Cybereason is an XDR and endpoint security platform for organisations that want to detect and respond to threats across endpoints, networks and cloud services. According to the vendor, the offering also includes threat intelligence and digital forensics and incident response (DFIR) expertise. Since late 2025 Cybereason has belonged to LevelBlue: the former cybereason.com website redirects to LevelBlue, which continues the Cybereason Defense Platform as a product line.
LevelBlue is a US provider of managed security services based in Dallas. Cybereason therefore falls under US jurisdiction, and US laws such as the CLOUD Act can apply to data the platform processes. The vendor's public pages do not state in which regions customer data is hosted or whether an EU data-residency option exists; a European customer should ask the vendor before purchase. The platform is not open source. For European organisations that want to remain under European jurisdiction, it is important to have the data processing agreement, the storage location of telemetry and the role of the new owner set out explicitly in the contract.