CyberIndexBeta

Product

Cybereason NGAV is the next-generation antivirus in the Cybereason Defense Platform. It combines multiple prevention layers to protect enterprise endpoints against malware, ransomware and fileless attacks. A MalOp is an automated security view that connects all related pieces of a cyberattack into a single, comprehensive story instead of overwhelming security teams with hundreds of separate alerts. Endpoint detection and response (EDR) is an array of modern, integrated endpoint security tools that detect, contain, investigate, and eliminate invasive cybersecurity threats high in the cyber kill chain. It is the approach that scored 100% detection and 100% accuracy in the 2025 MITRE ATT&CK Enterprise Evaluation, and it remains a core part of how LevelBlue detects and investigates on the endpoint. Supported platforms are Linux, macOS and Windows.

Current Version
26.1.48.1
Market
Enterprise
Licence
Paid
Price
Quote
Record Created
2026-08-20
Last Updated
2026-10-10

Vendor

Cybereason was founded in Boston in 2012 by Lior Div, Yossi Naar and Yonatan Striem-Amit, all veterans of Israeli military intelligence, and built its reputation on the idea that a detection product should present one attack as a single connected story — what it called the MalOp — rather than as a stream of separate alerts. It raised heavily, with SoftBank as its largest backer. It no longer exists as an independent company. Its website now redirects to LevelBlue, the managed security services company formed out of AT&T Cybersecurity, which states plainly that Cybereason is now LevelBlue. The endpoint technology continues inside LevelBlue's managed detection and response offering rather than being sold as a standalone brand. Products listed here under the Cybereason name — the Cybereason Defense Platform, its EDR, XDR and MDR services — should be read with that in mind: the technology is current, the vendor name on the box is being retired, and support and sales now run through LevelBlue. Vendor page →

Country
United States
Headquarters
Boston, United States
Year Established
2012
Customers
1,300 organisations
Users
6M devices protected
Revenue
$62.8M (2025)

Platforms

Linuxnative
macOSnative
Windowsnative

Target Market

Enterprise primary

Capabilities

Malware Detectionkeynative
Ransomware Protectionkeynative
Behavioral Detectionkeynative
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted ScanningNot known
Heuristic Detectionnative
Device Controlnative
Vulnerability Shieldingnative
Central Management ConsoleNot known

6 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 26.1.48.1Windows
  • 24.1.81.0LinuxmacOS

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

OESIS Framework SupportSupported1 activeSupported
OPSWAT Certified Security ApplicationGold1 activeGold

Change History

This record was created 2026-08-20. Everything below is what has changed since.

  • 2026-09-25New versionNew version: 26.1.48.1 (Windows)evidence
  • 2026-09-25New versionNew version: 24.1.81.0 (macOS)evidence
  • 2026-09-23Capability addedDevice Control: built inevidence
  • 2026-09-23Capability addedVulnerability Shielding: built inevidence
  • 2026-09-23Capability addedHeuristic Detection: built inevidence
  • 2026-09-23Capability addedRansomware Protection: built inevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-19Pricing plan addedPrice: price on requestevidence
  • 2026-09-09New versionNew version: 23.1.44.0 (Windows)evidence
  • 2026-09-09New versionNew version: 23.1.44.0 (macOS)evidence
  • 2026-09-09New versionNew version: 24.1.81.0 (Linux)evidence
  • 2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-08-20Capability addedBehavioral Detection: built inevidence
  • 2026-08-20Capability addedMalware Detection: built inevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20Product updatedSold to: Enterpriseevidence
  • 2026-08-20New versionNew version: 24.1.81.0evidence
  • 2026-08-20Platform addedRuns on macOSevidence
  • 2026-08-20Platform addedRuns on Linuxevidence
  • 2026-08-20Platform addedRuns on Windowsevidence
  • 2026-08-20Certification addedCertified: OPSWAT Certified Security Application (Gold)evidence
  • 2026-08-20Product createdNew product listedevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.