FireEye buys cyber intelligence firm iSight Partners for $200 million
Context & Ripple Effects
FireEye's $200M purchase of iSight Partners is the opening move in a decade-long build-and-prune arc at the company: it kept acquiring capabilities — including $250M for Verodin in 2019 and $186M for Respond Software alongside a Blackstone/ClearSky investment in 2020 — before ultimately selling its products business to Symphony Technology Group for $1.2B and splitting off Mandiant.
The deal also lands mid-wave: within weeks, IBM paid a reported $100M+ for incident-response firm Resilient Systems, and Symantec soon added Fireglass — security buyers were paying up for intelligence and response assets rather than point products.
First-order effects
- FireEye folds iSight's cyber intelligence operation into its portfolio, deepening the threat-intel side of a business that would later be separated from its products arm as Mandiant.
- Competing security vendors now face a rival that bundles threat intelligence with its existing offerings, pressuring peers to buy comparable intelligence or response assets — which IBM did weeks later with Resilient Systems.
Second-order effects
- The acquisition accelerates consolidation in cyber intelligence and incident response, pushing valuation benchmarks higher for independent firms in those niches and steering corporate security budgets toward integrated intel-plus-response platforms.
- As FireEye stacks acquisitions on top of each other, integration costs and strategic drift set up the eventual reversal: divesting the products business to private equity to refocus on intelligence and forensics.
Third-order effects
- If the pattern holds, the security industry splits structurally between platform-scale acquirers and focused pure-plays, with private equity acting as the buyer of divested product lines — the path FireEye itself took in the Symphony Technology Group sale.
- Threat intelligence shifts from a standalone service market to a component embedded in broader security contracts, changing how intelligence firms price and to whom they can sell independently.
The trend: Cybersecurity vendors are consolidating threat intelligence and incident-response capabilities through serial M&A, then pruning back to focused pure-plays via private-equity divestitures.