Hi, Security Community!
We’re happy to announce that Google has been named a Leader in the IDC MarketScape: Worldwide SIEM 2026 Vendor Assessment!
According to the report, “Google operates one of the larger hyperscale infrastructure footprints in the technology industry; its security business sits within Google Cloud and draws on adjacent assets. The 2022 Mandiant acquisition added frontline research, a portfolio of services including incident response, MDR, consulting and advisory, and applied intelligence capabilities. These capabilities have been integrated across the portfolio. For example, Google Threat Intelligence (GTI) consolidates all threat research, including VirusTotal's crowdsourced intelligence.”
The IDC MarketScape also noted, “Agentic capabilities, which use Google's Gemini, are central to Google SecOps. The Alert Triage and Investigation agent and Threat Intel agent entered public preview in late 2025 and reached general availability in 1Q26. Google SecOps was also among the first SIEM platforms to ship hosted Model Context Protocol servers, branded OneMCP, allowing LLM agents and Gemini CLI to interact with SecOps, GTI, and connected third-party tools through a standard protocol.”
Thank you to this community for your continued support; it takes a village!
For more on this, you can access a complimentary copy of the IDC MarketScape excerpt and also read our full blog post.
IDC MarketScape: Worldwide SIEM 2026 Vendor Assessment, #US54126826, June 2026
