Mandiant provides cybersecurity services, in particular incident response, threat intelligence and security consulting. Organisations engage Mandiant during an active or suspected incident, to prepare for and manage crises, and to test their security controls. According to Google, the portfolio also includes threat intelligence, attack surface monitoring and continuous security validation. The services are largely delivered by specialists and supplemented by products.
Mandiant, Inc. was acquired by Google on 12 September 2022 and has since been part of Google Cloud; the brand has been retained. The group, Alphabet, is headquartered in Mountain View, California (US). Where data from investigations is processed is not published. Google Cloud's data processing addendum explicitly refers to Mandiant Consulting Services and Managed Services and sets out the GDPR roles. Because the provider is subject to US jurisdiction, the CLOUD Act may apply to data shared during an incident investigation. European organisations can take this into account when agreeing data location and access terms in their contracts.