What do Alphabet and Overwatch sell?

Alphabet sells Google Threat Intelligence, Mandiant Consulting Services, Security Command Center, Identity Platform, reCAPTCHA Enterprise and 1 more. Overwatch sells Investigations.

Are Alphabet and Overwatch in the same category?

They share Threat intelligence. Alphabet's primary category is SIEM and Overwatch's is Threat intelligence.

Who are Alphabet and Overwatch sold to?

From its own pages, Google Cloud addresses organisations that own intellectual property in the form of highly sensitive data or that handle sensitive data subject to data protection regulations such as PCI DSS. From its own pages, Overwatch sells mainly to cyber, fraud and risk teams.

What have Alphabet and Overwatch announced recently?

December 22, 2025: Alphabet said it would buy clean energy developer Intersect for $4.75 billion in cash, plus assumed debt. October 19, 2026: Overwatch Data announced a $15 million Series A led by Mouro Capital, with Visa Ventures and Capital One Ventures participating.

Vendor comparison · 2 companies

Alphabet vs Overwatch

Alphabet sells a full suite of security products and services to protect workloads and meet digital sovereignty requirements. Overwatch sells a system that runs cyber, fraud, brand and merchant risk, with AI agents handling collection and the first pass of every investigation. CISO Tribune files both under Threat intelligence. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Alphabet
Overwatch

Add a company

Alphabet vs Overwatch: Products, Customers and Funding Compared
What it sells
	AlphabetAlphabet sells a full suite of security products and services to protect workloads and meet digital sovereignty requirements.cloud.google.com	OverwatchOverwatch sells a system that runs cyber, fraud, brand and merchant risk, with AI agents handling collection and the first pass of every investigation.overwatchdata.ai
What it sells	Google Threat Intelligence^[1][2]Threat intelligence for understanding threat actors and potential attack vectors. Mandiant Consulting Services^[2]Consulting services for understanding threat actors and potential attack vectors. Security Command Center^[1][3]A platform for defending against threats to Google Cloud assets. Identity Platform^[3][5]A customer identity and access management (CIAM) platform for apps. reCAPTCHA Enterprise^[3][5]Helps protect a website from fraudulent activity, spam and abuse. Google Cloud Armor^[3]Helps protect applications and websites against denial of service and web attacks.	Investigations^[6]AI agents take each signal to an evidence package, and analysts take the cases that need judgment.
Categories
Categories	SIEM (primary category) Threat intelligence Incident response and forensics Cloud-native application protection (CNAPP)	Threat intelligence (primary category) Digital risk protection Fraud prevention
Headquarters
Headquarters	Not stated on its pages	Not stated on its pages
Founded
Founded	Not stated on its pages	Not stated on its pages
Ownership and funding
Ownership and funding	Not stated on its pages	Not stated on its pages
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	December 22, 2025Alphabet said it would buy clean energy developer Intersect for $4.75 billion in cash, plus assumed debt.^[7]	October 19, 2026Overwatch Data announced a $15 million Series A led by Mouro Capital, with Visa Ventures and Capital One Ventures participating.^[11]
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	From its own pages, Google Cloud addresses organisations that own intellectual property in the form of highly sensitive data or that handle sensitive data subject to data protection regulations such as PCI DSS. Our reading is that Google Cloud addresses organisations migrating from on-premises to the cloud that want to replicate their on-premises network based security architecture as they move data to Google Cloud. Alphabet addresses customers that, as part of a migration to the cloud, may need to validate its compliance documentation, certifications and controls. Alphabet publishes regional compliance papers on the telecommunications industry. Alphabet's industry solutions range from improving retail product discovery to detecting bank fraud.	From its own pages, Overwatch sells mainly to cyber, fraud and risk teams. Overwatch describes card networks and acquirers as vetting portfolios of merchant descriptors for transaction laundering, prohibited content and shell storefronts. Overwatch names customers in finance, fintech and media. For executive protection, Overwatch says alerts go to whoever the customer nominates, which in most deployments is corporate security. Overwatch says it turns its understanding of the criminal underground into investigations and risk decisions for fraud and security teams.
Last verified
Last verified	November 2, 2026	October 26, 2026

Where they overlap

Alphabet and Overwatch are both filed under Threat intelligence.

Where they differ, field by field

Alphabet's primary category is SIEM; Overwatch's is Threat intelligence.
Alphabet is also filed under Incident response and forensics and Cloud-native application protection (CNAPP). Overwatch is also filed under Digital risk protection and Fraud prevention.
Alphabet lists Google Threat Intelligence, Mandiant Consulting Services, Security Command Center, Identity Platform, reCAPTCHA Enterprise and 1 more. Overwatch lists Investigations.

What it sells: Alphabet

What Google Threat Intelligence does^[1][2]: Google Threat Intelligence is used to understand threat actors and potential attack vectors. Google Threat Intelligence is offered alongside Mandiant Consulting Services.
What Mandiant Consulting Services does^[2]: Mandiant Consulting Services is offered to understand threat actors and potential attack vectors. Mandiant Consulting Services is offered alongside Google Threat Intelligence.
What Security Command Center does^[1][3]: Security Command Center is a platform for defending against threats. Security Command Center covers Google Cloud assets.
What Identity Platform does^[3][5]: Identity Platform is a customer identity and access management (CIAM) platform for adding identity and access management to apps. Identity Platform integrates with the reCAPTCHA Enterprise API to enhance security for users. With bot protection, Identity Platform provisions score-based reCAPTCHA keys in the customer's project.
What Google Cloud Armor does^[3]: Google Cloud Armor helps protect applications and websites against denial of service attacks. Google Cloud Armor covers web attacks against applications and websites.

What it sells: Overwatch

What Investigations does^[6]: Overwatch agents follow the actor, resolve connected infrastructure, pair exposed data with breach records and check what has been seen before. Findings can be assigned to individuals, given a status and commented on from first signal to close. Sources consulted, evidence found, connected entities and a verdict are attached to every finding.

Questions about Alphabet and Overwatch

What do Alphabet and Overwatch sell?: Alphabet sells Google Threat Intelligence, Mandiant Consulting Services, Security Command Center, Identity Platform, reCAPTCHA Enterprise and 1 more. Overwatch sells Investigations.
Are Alphabet and Overwatch in the same category?: They share Threat intelligence. Alphabet's primary category is SIEM and Overwatch's is Threat intelligence.
Who are Alphabet and Overwatch sold to?: From its own pages, Google Cloud addresses organisations that own intellectual property in the form of highly sensitive data or that handle sensitive data subject to data protection regulations such as PCI DSS. From its own pages, Overwatch sells mainly to cyber, fraud and risk teams.
What have Alphabet and Overwatch announced recently?: December 22, 2025: Alphabet said it would buy clean energy developer Intersect for $4.75 billion in cash, plus assumed debt. October 19, 2026: Overwatch Data announced a $15 million Series A led by Mouro Capital, with Visa Ventures and Capital One Ventures participating.

About Alphabet

Alphabet sells a full suite of security products and services to protect workloads and meet digital sovereignty requirements. Alphabet offers security products that help customers meet policy, regulatory and business objectives. Google Threat Intelligence and Mandiant Consulting Services are offered to understand threat actors and potential attack vectors. Google Security Operations is used to detect, investigate and respond to threats.^[1][2][3]

Security Command Center is a platform for defending against threats to Google Cloud assets. Assured Workloads provides compliance and security controls for sensitive workloads. Identity and Access Management is a permissions management system for Google Cloud resources. Google Cloud Armor helps protect applications and websites against denial of service and web attacks. Cloud Key Management is used to manage encryption keys on Google Cloud. Confidential Computing encrypts data in use with Confidential VMs. Cloud NGFW is a global firewall to protect cloud resources. Shielded VMs are virtual machines hardened with security controls and defenses. Secret Manager stores API keys, passwords, certificates and other sensitive data.^[1][3]

Cloud Data Loss Prevention is a platform for inspecting, classifying and redacting sensitive data. Sensitive Data Protection is a fully managed sensitive data protection service. Access Transparency provides cloud provider visibility through near real-time logs. Cloud Asset Inventory is used to view, monitor and analyze Google Cloud and Anthos assets across projects and services. Secure Web Proxy monitors and secures egress web traffic to help protect cloud workloads. Web Risk detects malicious URLs on a website and in client applications. Chrome Enterprise Premium is a zero-trust platform with integrated threat and data protection. Assured Open Source Software lets developers incorporate the same OSS packages that Google uses into their own developer workflows. Sovereign Controls by Partners provides partner-operated sovereignty controls for Google Cloud to meet digital sovereignty requirements.^[3]

VPC Service Controls protects sensitive data in Google Cloud services using security perimeters. VPC Service Controls helps protect against accidental or targeted action by external or insider entities, to minimize data exfiltration risks from Google Cloud services such as Cloud Storage and BigQuery. VPC Service Controls is used to create perimeters that protect the resources and data of services that are explicitly specified. By allowing private access only from authorized VPC networks, VPC Service Controls helps protect against data exfiltration by clients using stolen OAuth or service account credentials. VPC Service Controls adds a layer of security defense for Google Cloud services that is independent of Identity and Access Management (IAM). Google Cloud provides a restricted virtual IP that is integrated with VPC Service Controls. VPC Service Controls lets administrators monitor resource access patterns across service perimeters using Cloud Audit Logs. VPC Service Controls can run in dry run mode to monitor requests to protected services without preventing access. VPC Service Controls configurations are managed at the organization level by default.^[3]

Identity Platform is a customer identity and access management (CIAM) platform for adding identity and access management to apps. Identity Platform integrates with the reCAPTCHA Enterprise API to enhance security for users. With bot protection, Identity Platform provisions score-based reCAPTCHA keys in the customer's project. In audit mode for email-password sign-in, Identity Platform creates reCAPTCHA keys that assess traffic to Identity Platform APIs without blocking any requests. For phone authentication, Identity Platform blocks a request that fails the toll fraud assessment and does not send an SMS verification code. reCAPTCHA Enterprise helps protect a website from fraudulent activity, spam and abuse. Identity-Aware Proxy uses identity and context to guard access to applications and VMs. Cloud Identity is a unified platform for IT admins to manage user devices and apps.^[3][5]

Google Cloud creates and shares mappings of its security, privacy and compliance controls to standards from around the world. Alphabet regularly undergoes independent verification to achieve certifications, attestations and audit reports. An independent third-party auditor has granted formal certifications, attestations or audit reports covering Alphabet's compliance offerings. Alphabet's certifications and attestations include ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, ISO/IEC 42001, PCI DSS, SOC 1, SOC 2 and SOC 3. Alphabet's compliance offerings include FedRAMP, FIPS 140-2 Validated and HITRUST CSF. Alphabet's compliance offerings include Protected B in Canada, StateRAMP, TruSight and the U.S. Cybersecurity Maturity Model Certification (CMMC). Cloud service providers cannot formally certify a customer's compliance with laws and regulations. Alphabet reviews laws and regulations and, where possible, provides guidance documents, mappings and papers that outline its technical capabilities and legal commitments.^[6]

Alphabet's industry solutions range from improving retail product discovery to detecting bank fraud. Gemini platform is a fully managed AI development platform for building and managing AI applications and agents, with access to Agent Studio and 200+ foundation models.^[1][2][6]

Alphabet on the record

About Overwatch

Overwatch sells a system that runs cyber, fraud, brand and merchant risk, with AI agents handling collection and the first pass of every investigation. Overwatch sells AI-native threat intelligence and risk operations for cyber, fraud and risk teams. Overwatch says threats arrive from every direction, including compromised accounts, fraud patterns and fake merchant applications.^[1][2][3]

Overwatch collects continuously across the criminal underground, markets, leak sites, forums and channels where fraudsters and threat actors stage. Overwatch uses classifiers and anomaly detection to turn a constant stream of raw activity into candidate signal. Overwatch collection runs continuously across underground forums, marketplaces, leak sites and messaging channels, including non-English communities. Overwatch agents follow the actor, resolve connected infrastructure, pair exposed data with breach records and check what has been seen before. Overwatch attaches sources consulted, evidence found, connected entities and a verdict to every finding.^[1][3][5][6]

Overwatch analysts work the hard cases by hand, including leads found through human collection where stolen data and access are sold. Overwatch analysts take the hard cases and teach the agents what to look for next. Overwatch delivers validated findings into SIEM, SOAR, case management and executive briefings. Overwatch findings can be assigned to individuals, given a status and commented on for each case from first signal to close. Overwatch delivers email and SMS alerts, Slack, API, and SIEM and case management integrations. Overwatch offers monitoring mapped to a customer's assets, vendors and business units, with automated alerts tuned to priorities.^{[1][2][3][4][5][6]}

Overwatch cyber threat intelligence covers dark web markets, ransomware leak sites and vulnerability chatter. Overwatch offers automated merchant review and KYB, including fraud review and card network compliance checks. Overwatch brand protection addresses impersonation, lookalike domains and spoofed storefronts aimed at a brand, with takedown signals routed to the right team. Overwatch addresses threats against executives and VIPs that cross into the physical world, including risks tied to events and facilities. Overwatch offers continuous monitoring for vendor and supply chain compromise.^[4]

Overwatch collects the tools, methods and stolen data circulating in fraud channels and works out which of it points at the customer. Overwatch fraud collection includes image-based material such as receipts, balance screenshots and phishing kits. Overwatch agents verify listings against issuer records, map seller aliases across channels and pair compromised data with the customer base. Overwatch routes fraud findings to fraud operations with the evidence attached, including card reissue lists and prioritized actions. Overwatch brand protection watches newly registered domains, app stores, social platforms and the channels where scam kits are traded. Overwatch agents confirm the impersonation, trace hosting and registration, capture evidence and assess reach. Overwatch assembles the evidence package and routes it to a takedown provider where a customer uses one. Overwatch monitors for threats against executives, board members and public figures, including exposed personal data, coordinated harassment and threats tied to an event, a facility or a trip. Overwatch routes executive escalations with evidence attached to corporate security, the protective detail or law enforcement. Overwatch collection covers channels it has legitimate access to, including invite-based fraud and harassment channels.^[4][7][8]

Overwatch describes card networks and acquirers as facing portfolios of merchant descriptors to vet for transaction laundering, prohibited content and shell storefronts. Overwatch merchant agents inspect the merchant and its policy pages, examine hosting and registration signals, trace the checkout and payment flow, pull external reputation, and output a risk verdict. Overwatch merchant risk returns a written verdict with risk indicators and confidence into the review queue or via API. Overwatch merchant reviews map to a customer's categories and MCC structure.^[10]

Overwatch is the system Arjun Bisen and Zara Perumal wanted after careers at Stripe, Google and Twitter. Overwatch has raised a $15 million Series A, led by Mouro Capital with Visa Ventures and Capital One Ventures. Overwatch says the funding lets it extend its agents across more of the risk lifecycle, from monitoring and investigations in the criminal underground to merchant onboarding and due diligence. Overwatch names Visa among its customers, alongside 40+ others in finance, fintech and media.^{[2][3][4][5][6]}

Overwatch on the record

Sources

Alphabet full record

[1]SecurityGoogle Cloud · cloud.google.com · undated page, accessed November 2, 2026 · Tier A
[2]AI and Cloud Computing Services | Google CloudGoogle Cloud · undated page, accessed November 10, 2026 · Tier A
[3]Security and identity products | Google CloudGoogle Cloud · undated page, accessed November 10, 2026 · Tier A
[4]Overview of VPC Service Controls | Google Cloud DocumentationGoogle Cloud Documentation · undated page, accessed November 10, 2026 · Tier A
[5]Integrate Identity Platform with the reCAPTCHA Enterprise API | Google Cloud DocumentationGoogle Cloud Documentation · undated page, accessed November 10, 2026 · Tier A
[6]Cloud compliance and regulations resources | Google CloudGoogle Cloud · undated page, accessed November 10, 2026 · Tier A
[7]Alphabet to buy clean energy developer Intersect in $4.75 billion deal amid AI pushReuters · published December 22, 2025 · Tier B

Overwatch full record

[1]overwatchdata.aiOverwatch · overwatchdata.ai · undated page, accessed October 26, 2026 · Tier A
[2]About Overwatch Data: founders, team & missionOverwatch · undated page, accessed November 10, 2026 · Tier A
[3]AI-native threat intelligence & risk operations | Overwatch DataOverwatch · undated page, accessed November 10, 2026 · Tier A
[4]AI threat intelligence platform | Overwatch DataOverwatch · undated page, accessed November 10, 2026 · Tier A
[5]Cyber threat intelligence | Overwatch DataOverwatch · undated page, accessed November 10, 2026 · Tier A
[6]AI agents for investigations | Overwatch DataOverwatch · undated page, accessed November 10, 2026 · Tier A
[7]Fraud intelligence | Overwatch DataOverwatch · undated page, accessed November 10, 2026 · Tier A
[8]Brand protection | Overwatch DataOverwatch · undated page, accessed November 10, 2026 · Tier A
[9]VIP & executive protection | Overwatch DataOverwatch · undated page, accessed November 10, 2026 · Tier A
[10]Merchant risk & KYB automation | Overwatch DataOverwatch · undated page, accessed November 10, 2026 · Tier A
[11]We raised $15 million to help risk teams keep pace with AI-scale attacks | Overwatch DataOverwatch Data · published October 19, 2026 · Tier A

Spot a factual error? Request a correction.