What does Splunk sell?

Splunk sells Splunk Cloud Platform, Splunk Enterprise, Splunk Enterprise Security, Federated Search, Splunk AI Assistant, Splunk Edge Processor, Splunk AI Toolkit and Splunk Log Observer Connect. Splunk Cloud Platform: A platform to collect, index, and visualize data in the cloud. Splunk Enterprise: A platform to collect, index, and visualize data using an on-premises engine. Splunk Enterprise Security: A Splunk solution for security operations. Federated Search: A search layer across the data estate.

From its own pages, Splunk sells mainly to organisations that want security, observability, and AI data on one platform. Splunk describes SOC teams that index authentication and firewall data for real-time detections. Splunk describes a healthcare organization that monitors logs from medical devices. Splunk offers material for CISOs and boards on priorities, budgeting, compliance, and success metrics. Splunk describes deployments on Splunk Enterprise and Splunk Cloud Platform.

How does CISO Tribune file Splunk?

CISO Tribune files Splunk under SIEM, with SOAR and security automation and Security data lakes and pipelines as secondary categories.

Where is Splunk headquartered?

Splunk is headquartered in San Jose, United States.

Which customers does Splunk name?

Organizations publicly named as Splunk customers on CISO Tribune's record: Carrefour, Intel, FINRA, Alaska Airlines and Honda of Alabama.

Company record · security vendor

Splunk

Where Splunk appears on the record (52)

Every page on CISO Tribune and its network that carries this company, 52 in all.

Compared with (48): vs 7AI, vs Alphabet, vs Anomali, vs Beacon, vs Binary Defense, vs Blackpoint Cyber, vs Cisco, vs Cribl, vs CyberKord, vs Cynet, vs Cyware, vs D3 Security, vs DataBahn, vs Daylight, vs DefenseStorm, vs Devo, vs Elastic, vs Elbit Systems, vs Exabeam, vs Exaforce, vs Fortinet, vs Graylog, vs Guardsix, vs Gurucul, vs Hunters, vs Huntress, vs Mars Security, vs Mate Security, vs Mave, vs Microsoft, vs Panther, vs Proficio, vs Proximus NXT, vs Rapid7, vs Realm Security, vs ReliaQuest, vs RunReveal, vs Securonix, vs SolarWinds, vs Stellar Cyber, vs Sumo Logic, vs Swimlane, vs Tenfold Security, vs Tenzir, vs ThreatDefence, vs Tines, vs Torq, vs UnderDefense
In the vendor directory (4): SIEM vendors · primary category
SOAR and security automation vendors · category
Security data lakes and pipelines vendors · category
SOC vendors: who they are and how CISOs compare them, from MDR to SIEM · vendor guide

What the company sells

Splunk sells a data platform for security, observability, and AI, and says the platform unifies petabyte-scale machine data wherever it lives.

Splunk says its unified platform gives teams cross-domain context for security, observability, and AI and keeps telemetry where it lives. Splunk says teams can search and analyze data where it lives to reduce costs. Splunk says its platform preserves full access and context for AI and analytics without the ingest tax or unnecessary data movement.

On the security side, Splunk says adversaries using AI are shrinking remediation windows from months to minutes. Splunk says its answer combines unified data, advanced TDIR, and AI agents that enable experts to mitigate threats across any attack surface. Splunk says teams can use AI agents and assistants to predict and prevent issues, eliminate toil, and accelerate remediation safely. Splunk describes a SOAR system that integrates orchestration, playbook automation, and case management. Splunk names Splunk Enterprise Security, Splunk IT Service Intelligence, and the Splunk Common Information Model as Splunk solutions that use pre-written macros.

Splunk describes AI Assistant in Security as available to cloud customers of Splunk Enterprise Security, and says it automates repetitive steps and guides analysts in daily investigation workflows. Splunk describes a Triage Agent, in alpha, that evaluates, prioritises, and explains alerts. Splunk describes an Automation Builder Agent, in alpha, that turns natural language into SOAR playbooks. Splunk describes a Malware Threat Reversing Agent for customers of Splunk Attack Analyzer that summarizes threats by breaking down malicious scripts.

Splunk Cloud Platform is described as a way to collect, index, and visualize data in the cloud. Splunk Enterprise is described as collecting, indexing, and visualizing data using an on-premises engine. Splunk describes Splunkbase as the place to discover, share, and install apps and add-ons with the Splunk community. Splunk says teams can connect and act on data through integrations and apps on Splunkbase, across cloud, SaaS, IT, and machine data from OT and IoT. Splunk says teams can instrument with native OpenTelemetry support, SDKs, and agents.

Splunk describes Federated Search as the unifying search layer across the data estate, covering Splunk-managed locations and supported customer-managed stores such as Amazon S3 and Snowflake. Splunk describes Splunk AI Assistant as a natural-language entry point to the search workflow. Agent Mode is available in Splunk AI Assistant 2.1 or later for supported Splunk Cloud Platform and Cloud Connected deployments running Splunk platform 10.1 or later. Splunk describes the Splunk AI Toolkit as providing step-by-step guided workflows to build and deploy models for common business challenges.

Splunk says Splunk Edge Processor applies cryptographic functions to data in real time as the data flows within an on-premises environment. Splunk says ODBC-enabled apps such as Microsoft Excel, Power BI, and Tableau can connect to the Splunk platform, with SQL queries used to interact with the server. Splunk describes Splunk Log Observer Connect as an integration that lets logs on Splunk Enterprise or Splunk Cloud Platform be queried and associated with Related Content in Splunk Observability Cloud.

On the observability side, Splunk says teams can use AI SRE agents to isolate root causes across environments and identify targeted fixes such as rollbacks or capacity adjustments. Splunk says teams can track LLM token usage with visibility and attribution. Splunk describes a healthcare organization using the Splunk platform to monitor and analyze logs generated from medical devices.^{[1][12][13][14][17][18][19][20][21][22]}

Categories: SIEM (primary category)
SOAR and security automation
Security data lakes and pipelines
Compare Splunk with companies in the same category
Headquarters: San Jose, United States^[4]
Founded: 2003^[3]
Ownership: Owned by Cisco^{[2][15][16][25]}
CISO on record: Not yet on our record. Send a verified source
Website: splunk.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

Splunk Cloud Platform^{[12][22][23][24]}
A platform to collect, index, and visualize data in the cloud.
Splunk Cloud Platform is described as a way to collect, index, and visualize data in the cloud. Splunk says data can be brought in with agents, Splunk-supported integrations, and developer add-ons.
Splunk Enterprise^{[1][12][14][17][18][22][24]}
A platform to collect, index, and visualize data using an on-premises engine.
Splunk Enterprise Security^{[1][14][17][18]}
A Splunk solution for security operations.
Splunk names Splunk Enterprise Security among its solutions that use pre-written macros. Splunk describes AI Assistant in Security as available to cloud customers of Splunk Enterprise Security.
Federated Search^[15][19]
A search layer across the data estate.
Federated Search is described as the unifying search layer across the data estate. It covers Splunk-managed locations and supported customer-managed stores such as Amazon S3 and Snowflake.
Splunk AI Assistant^[19]
A natural-language entry point to the search workflow.
Splunk AI Assistant provides a natural-language entry point to the search workflow. With Agent Mode enabled, an analyst can describe the investigation to perform instead of constructing each search.
Splunk Edge Processor^[21]
A processor that applies cryptographic functions to data as it flows on-premises.
Splunk AI Toolkit^[20]
Guided workflows to build and deploy models.
Splunk Log Observer Connect^[22]
An integration that links logs to Splunk Observability Cloud.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Splunk's categories, then alphabetical. A list from the record, never a ranking.

On siem, Splunk competes with Elastic, Guardsix, Gurucul, Hunters, RunReveal, Securonix, Sumo Logic, Alphabet, Exabeam, Graylog and 22 more.
On soar and security automation, Splunk competes with D3 Security, Swimlane, Tines, Devo, Elastic, Guardsix, Gurucul, Securonix, CyberKord, Cyware and 5 more.
On security data lakes and pipelines, Splunk competes with Devo, Cribl, Realm Security, Beacon, DataBahn, Mars Security, Tenzir, Hunters, Panther, RunReveal and 3 more.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

G2 · no rating shown · 434 reviews^[16]seen November 3, 2026

Named customers

Organizations publicly named as customers, each linked to the page that names it. Not a complete list, and not an endorsement.

Carrefour^[5]Splunk
Intel^[6]Splunk
FINRA^[7]Splunk
Alaska Airlines^[8]Splunk
Honda of Alabama^[9]Splunk

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

[1]ProductsSplunk · splunk.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
[2]Cisco completes acquisition of splunkCisco · newsroom.cisco.com · published March 18, 2024 · Tier A: the company, a regulator or a filing
[3]Get the most out of splunk infrastructure monitoring and splunk itsiSplunk · splunk.com · published November 17, 2020 · Tier A: the company, a regulator or a filing
[4]Contact usSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
[5]CarrefourSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
[6]IntelSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
[7]FinraSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
[8]Alaska airlinesSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
[9]HondaSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
[10]Cisco delivers trusted ai at scale through new splunk advancementsCisco · newsroom.cisco.com · published September 15, 2026 · Tier A: the company, a regulator or a filing
[11]Cisco buys galileo strengthen splunks agentic monitoring capabilitiesSiliconANGLE · siliconangle.com · published April 9, 2026 · Tier B: trade or business press
[12]Get Data In | Platform (last updated lastModifiedISO)Splunk · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
[13]Analytics Story: Warzone RAT | Splunk Security ContentSplunk · published May 13, 2026 · Tier A: the company, a regulator or a filing
[14]Analytics Story: Trickbot | Splunk Security ContentSplunk · published May 13, 2026 · Tier A: the company, a regulator or a filing
[15]Splunk | Data Platform for Security, Observability & AISplunk · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
[16]Splunk Enterprise Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed October 28, 2026 · Tier C
[17]Using advanced macros - Splunk LanternSplunk Lantern · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
[18]L’IA au service de la sécurité | SplunkSplunk · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
[19]Investigating and searching across your data estate with Cisco Data Fabric powered by the Splunk platform - Splunk LanternSplunk Lantern · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
[20]Preparing data for use with the Splunk AI Toolkit - Splunk LanternSplunk Lantern · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
[21]De-identifying PII consistently with hashing in Edge Processor - Splunk LanternSplunk Lantern · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
[22]Using Log Observer Connect with Cloud Platform - Splunk LanternSplunk Lantern · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
[23]Splunk Launches Hosted Generative AI Models: Native-AI Insights, Zero Setup, Maximum SecuritySplunk · published February 18, 2026 · Tier A: the company, a regulator or a filing
[24]Announcing Splunk Enterprise 10.2 & Splunk Cloud Platform 10.2 – Next Generation Querying & AnalyticsSplunk · published January 16, 2026 · Tier A: the company, a regulator or a filing
[25]Splunk Observability + Galileo: Bridging the AI Trust GapSplunk · published May 28, 2026 · Tier A: the company, a regulator or a filing

Last verified October 10, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 3, 2026 from the references above.

Work for Splunk? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Security leadership

CISO Tribune has not yet recorded who holds the top security seat at Splunk. We add a seat only from a verified source; if you have one, send it to the desk.

Questions CISOs ask about Splunk

What does Splunk sell?: Splunk sells Splunk Cloud Platform, Splunk Enterprise, Splunk Enterprise Security, Federated Search, Splunk AI Assistant, Splunk Edge Processor, Splunk AI Toolkit and Splunk Log Observer Connect. Splunk Cloud Platform: A platform to collect, index, and visualize data in the cloud. Splunk Enterprise: A platform to collect, index, and visualize data using an on-premises engine. Splunk Enterprise Security: A Splunk solution for security operations. Federated Search: A search layer across the data estate.
Who does Splunk fit?: From its own pages, Splunk sells mainly to organisations that want security, observability, and AI data on one platform. Splunk describes SOC teams that index authentication and firewall data for real-time detections. Splunk describes a healthcare organization that monitors logs from medical devices. Splunk offers material for CISOs and boards on priorities, budgeting, compliance, and success metrics. Splunk describes deployments on Splunk Enterprise and Splunk Cloud Platform.
How does CISO Tribune file Splunk?: CISO Tribune files Splunk under SIEM, with SOAR and security automation and Security data lakes and pipelines as secondary categories.
Where is Splunk headquartered?: Splunk is headquartered in San Jose, United States.
When was Splunk founded?: Splunk was founded in 2003.
Who owns Splunk?: Splunk is owned by Cisco.
Which customers does Splunk name?: Organizations publicly named as Splunk customers on CISO Tribune's record: Carrefour, Intel, FINRA, Alaska Airlines and Honda of Alabama.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.