FireEye

What FireEye does

FireEye, founded in 2004 by Ashar Aziz, was an intelligence-led cybersecurity company specializing in advanced threat detection, threat intelligence, and incident response. Following acquisition by Symphony Technology Group in 2021 and the subsequent 2022 merger with McAfee Enterprise, the combined business now operates as Trellix (legal entity Musarubra US LLC), with the FireEye brand retained as a product line. The Trellix platform delivers integrated security across endpoint, network, data, email, and security operations, anchored by the proprietary Trellix Wise GenAI capability and a unified 'Resilient by Design' architecture supporting on-premises, cloud, hybrid, and air-gapped environments.

The platform is supported by a global threat intelligence operation spanning 180+ countries and 100M+ endpoint nodes, combining AI-driven detection with human-led research through the Advanced Research Center and recurring CyberThreat Reports. Revenue is generated through a mix of platform subscriptions, professional services, managed detection and response (MDR), and education services (Trellix Academy). The business is sold via enterprise field sales, a global channel partner network, the Security Innovation Alliance, and strategic partnerships with Amazon Web Services, Google Cloud, and Telefónica Tech. The company serves large enterprises and government organizations across verticals including Government, Healthcare, Oil and Gas, Retail, and Transportation/Logistics, with explicit emphasis on regulated and critical infrastructure customers.

Trellix holds analyst recognition across multiple categories including Gartner Magic Quadrant for NDR, KuppingerCole Email Security Overall Leader, IDC MarketScape DLP Major Player, and SE Labs Enterprise Endpoint winner (all 2025). It is a privately held subsidiary of Symphony Technology Group, with operational headquarters in San Jose, California, and 1,001-5,000 employees globally.

Name

FireEye

Legal name

Musarubra US LLC

Website

https://fireeye.com

Company type

Private

Founded year

2004

Operating status

Acquired

Headcount range

1,001–5,000 employees

Short description

FireEye (operating as Trellix) is an intelligence-led cybersecurity platform provider delivering AI-powered endpoint, network, data, email, and security operations protection to large enterprises and government organizations across 180+ countries, with proprietary GenAI capabilities and managed detection and response services.

Ownership category

akta.pro rank

Product category

Enterprise Cybersecurity

NAICS

Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (54151)

akta.pro primary industry

Endpoint Security Managed Services (EDR/XDR) (BPAEADAH)

akta.pro secondary industries

Threat Intelligence Platforms (TIP) (HDADAGAD), Security Operations Center (SOC) as a Service (BPAEADAB), Cybersecurity Architecture & Security Integration (BPAEAAAL), Threat Intelligence Services (BPAEADAC)

Keywords

• Endpoint security
• Network detection response
• Threat intelligence
• Email security
• Data protection

Headquarters

HQ city

Milpitas

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Platform and Security Solutions: Enterprise security platform providing integrated security controls across endpoint, network, data, email, and third-party security. Includes detection & prioritization, context & enrichment, platform-wide correlation, and threat hunting & forensics capabilities.
2. Professional Services: Implementation, deployment, and ongoing professional services for enterprise customers including security assessments and incident response capabilities.
3. Managed Detection and Response (MDR): Managed detection and response services providing continuous monitoring and threat response capabilities for organizations.
4. Education Services: Training and certification programs through Trellix Academy for customer and partner enablement.

Go-to-market motion1 record

Distribution channels5 records

Marketing channels6 records

Core offering

FireEye (now operating under the Trellix brand) provides an intelligence-led cybersecurity platform that delivers AI-powered threat detection and response across endpoint, network, data, email, and cloud environments. The company combines its GenAI assistant Trellix Wise with security operations, threat intelligence, professional services, and managed detection and response offerings for enterprise and government customers.

Product overview

FireEye was a unified cybersecurity platform that provided advanced threat detection, threat intelligence, and incident response solutions. The company offered a comprehensive portfolio including endpoint security, network security (including network forensics), email security, and cloud security solutions. FireEye's Helix platform served as a security operations platform that connected its various security products. Following the acquisition by McAfee Enterprise and subsequent formation of Trellix, FireEye's technology has been integrated into the Trellix platform which now offers AI-powered security operations, endpoint security, network detection and response, threat intelligence, email security, and data security under a unified architecture.

Differentiator

Problem solved

Functional benefit

Products and services

• Endpoint Security

Quantifiable outcome

• 100M+ endpoint nodes protected
• +1 more outcomes

Named customers4 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Three partnerships are on record, tiered core.

• Amazon Web Services (AWS)coreTechnology or IntegrationStrategic cloud partnership for integrated security delivery on AWS cloud infrastructure. Joint go-to-market and customer delivery through AWS marketplace and integrated solutions.
• Google CloudcoreTechnology or IntegrationStrategic partnership for integrated cloud security delivery on Google Cloud Platform. Joint customer engagement and integrated solution delivery.
• Telefónica TechcoreChannel Partner/ Reseller/ DistributorStrategic telecommunications partner providing managed security services and customer delivery across Telefónica's global customer base.

Scale indicators3 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• CrowdStrike: CrowdStrike is the category-leading cloud-native endpoint detection and response (EDR/XDR) platform and the most direct competitor to Trellix's endpoint and security operations offerings, targeting the same large enterprise and government buyers with subscription-based protection.
• Palo Alto Networks: Palo Alto Networks competes directly through its Cortex XDR and Cortex XSIAM platforms, which combine endpoint, network, and cloud detection with GenAI-powered SOC automation—overlapping substantially with Trellix Wise and the unified XDR platform strategy.
• SentinelOne: SentinelOne offers AI-driven endpoint protection and Singularity XDR, directly comparable to Trellix's endpoint and AI-powered detection capabilities, and competes for the same mid-market and enterprise security budget.
• Sophos: Sophos provides endpoint protection, XDR, and managed detection and response (MDR) services, directly mirroring Trellix's endpoint and MDR offerings, particularly for mid-market and SMB segments served through channel partners.
• Trend Micro: Trend Micro competes across endpoint security, network defense, email security, and extended detection and response, serving the same enterprise and government buyers with a comparable multi-product security platform.

Broad incumbents

• Microsoft Security: Microsoft bundles Defender for Endpoint, Sentinel SIEM, and Security Copilot across the enterprise install base, making it a formidable broad incumbent that competes with Trellix in endpoint, SIEM, email, and SOC automation as part of a larger productivity and cloud portfolio.
• Fortinet: Fortinet's FortiXDR, FortiMail, FortiNDR, and FortiGuard threat intelligence form an integrated security platform that overlaps substantially with Trellix's endpoint, NDR, email, and threat intelligence products, anchored by their network security installed base.
• Check Point Software Technologies: Check Point's Infinity Platform delivers consolidated security across endpoint, network, cloud, and email with its own threat intelligence, directly competing with Trellix's broad XDR and threat intelligence-led messaging for enterprise and government accounts.
• Cisco (Secure) / Splunk: Cisco Secure plus the Splunk security analytics portfolio competes with Trellix in network detection and response, SOC analytics, and security observability for large enterprise and federal customers following Cisco's acquisition of Splunk.

Emerging players

• Arctic Wolf: Arctic Wolf is a fast-growing managed detection and response provider that bundles its SIEM-like platform with concierge SOC services, directly comparable to Trellix's MDR offering and increasingly competing for endpoint and SOC budget in mid-market and enterprise accounts.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/fireeye
• Facebookfacebook.com/FireEye
• LinkedInlinkedin.com/company/fireeye

Revenue estimate

Valuation estimate

Number of profiles

Profiles11 records

Subsidiaries1 record

Funding overview

Funding rounds8 records

Investors17 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A10 records

Investments3 records

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about FireEye