CISO Tribune

Vendor comparison · 2 companies

Splunk vs Stellar Cyber

Splunk sells a data platform for security, observability, and AI, and says the platform unifies petabyte-scale machine data wherever it lives. Stellar Cyber sells a SecOps platform that uses AI for threat detection and response through unified NG-SIEM, NDR, and Open XDR capabilities. CISO Tribune files both under SIEM. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Splunk
  • Stellar Cyber
Splunk vs Stellar Cyber: Products, Customers and Funding Compared
SplunkSplunk sells a data platform for security, observability, and AI, and says the platform unifies petabyte-scale machine data wherever it lives.splunk.comStellar CyberStellar Cyber sells a SecOps platform that uses AI for threat detection and response through unified NG-SIEM, NDR, and Open XDR capabilities.stellarcyber.ai
What it sells
  • Splunk Cloud Platform[12][22][23][24]A platform to collect, index, and visualize data in the cloud.
  • Splunk Enterprise[1][12][14][17][18][22][24]A platform to collect, index, and visualize data using an on-premises engine.
  • Splunk Enterprise Security[1][14][17][18]A Splunk solution for security operations.
  • Federated Search[15][19]A search layer across the data estate.
  • Splunk AI Assistant[19]A natural-language entry point to the search workflow.
  • Splunk Edge Processor[21]A processor that applies cryptographic functions to data as it flows on-premises.
  • Splunk AI Toolkit[20]Guided workflows to build and deploy models.
  • Splunk Log Observer Connect[22]An integration that links logs to Splunk Observability Cloud.
  • Stellar Cyber Open XDR PlatformA SecOps platform that unifies SIEM, network detection and response, identity threat detection and response, and behavior analytics with AI-driven detection, investigation and response.
Categories
Headquarters
San Jose, United States[4]Not stated on its pages
Founded
2003[3]Not stated on its pages
Ownership and funding
Owned by Cisco[2][15][16][25]Privately held[3][4]
Named customers
Not stated on its pages
Recent news
  • September 15, 2026Cisco released Cisco AI POD for Splunk, which brings Splunk AI features to on-premises customers on Cisco infrastructure with NVIDIA computing.[10]
  • May 28, 2026Splunk reported that Cisco has completed its acquisition of Galileo, with plans to integrate Galileo technology into Splunk Observability.[25]
  • April 9, 2026Cisco agreed to buy AI observability startup Galileo Technologies to add its agent monitoring tools to the Splunk observability platform.[11]
  • February 18, 2026Splunk announced that its hosted AI models are generally available for Splunk Cloud Platform customers.[23]
  • January 16, 2026Splunk announced the release of Splunk Enterprise 10.2 and Splunk Cloud Platform 10.2.[24]
  • October 5, 2026Stellar Cyber announced version 7.0 of its security operations platform, adding AI case triage, case metrics and expanded automated response.[16]
G2 and Gartner Peer Insights
  • G2: listed, seen November 3, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Splunk sells mainly to organisations that want security, observability, and AI data on one platform. Splunk describes SOC teams that index authentication and firewall data for real-time detections. Splunk describes a healthcare organization that monitors logs from medical devices. Splunk offers material for CISOs and boards on priorities, budgeting, compliance, and success metrics. Splunk describes deployments on Splunk Enterprise and Splunk Cloud Platform.Stellar Cyber describes its open SecOps platform as built for lean security teams and MSSPs. Stellar Cyber designs its enterprise platform for security teams of any size or skill level. Stellar Cyber Open XDR can be deployed on-premises, from the cloud, or co-managed by an MSSP.
Last verified
October 10, 2026November 9, 2026

Where they overlap

  • SIEM is the primary category of both Splunk and Stellar Cyber.

Where they differ, field by field

  • Splunk is also filed under SOAR and security automation and Security data lakes and pipelines. Stellar Cyber is also filed under AI SOC analysts and MDR and managed SOC.
  • Splunk lists Splunk Cloud Platform, Splunk Enterprise, Splunk Enterprise Security, Federated Search, Splunk AI Assistant and 3 more. Stellar Cyber lists Stellar Cyber Open XDR Platform.
  • Splunk is headquartered in San Jose, United States.
  • Splunk was founded in 2003.
  • Splunk is owned by Cisco. Stellar Cyber is privately held.
  • Splunk publicly names Carrefour, Intel, FINRA, Alaska Airlines and Honda of Alabama.

How they differ

CISO Tribune files Splunk under SIEM, SOAR and security automation, and Security data lakes and pipelines, with SIEM as its primary category. CISO Tribune files Stellar Cyber under SIEM, AI SOC analysts, MDR and managed SOC, also with SIEM as its primary category. Splunk sells a data platform for security, observability, and AI, with products such as Splunk Cloud Platform, Splunk Enterprise, Splunk Enterprise Security and Federated Search. Stellar Cyber sells the Stellar Cyber Open XDR Platform, which unifies SIEM, network detection and response, identity threat detection and response, and behavior analytics with AI-driven detection, investigation and response. Stellar Cyber says its license is consumption-based and includes all features.

Both companies describe AI assistance for analysts: Splunk offers Splunk AI Assistant, and Stellar Cyber offers conversational GenAI called AI Investigator. Splunk also describes a SOAR system with orchestration, playbook automation, and case management, while Stellar Cyber provides built-in and custom playbooks. Stellar Cyber lists 400+ integrations and says its Open XDR can be deployed on-premises, from the cloud, or co-managed by an MSSP. Stellar Cyber says its platform is built for lean security teams and MSSPs.

Splunk is headquartered in San Jose, United States, was founded in 2003, and is owned by Cisco. Stellar Cyber is privately held. Splunk publicly names Carrefour, Intel, FINRA, Alaska Airlines and Honda of Alabama as customers. On May 28, 2026, Splunk reported that Cisco had completed its acquisition of Galileo. On October 5, 2026, Stellar Cyber announced version 7.0 of its security operations platform, adding AI case triage, case metrics and expanded automated response.

What it sells: Splunk

What Splunk Cloud Platform does[12][22][23][24]
Splunk Cloud Platform is described as a way to collect, index, and visualize data in the cloud. Splunk says data can be brought in with agents, Splunk-supported integrations, and developer add-ons.
What Splunk Enterprise Security does[1][14][17][18]
Splunk names Splunk Enterprise Security among its solutions that use pre-written macros. Splunk describes AI Assistant in Security as available to cloud customers of Splunk Enterprise Security.
What Federated Search does[15][19]
Federated Search is described as the unifying search layer across the data estate. It covers Splunk-managed locations and supported customer-managed stores such as Amazon S3 and Snowflake.
What Splunk AI Assistant does[19]
Splunk AI Assistant provides a natural-language entry point to the search workflow. With Agent Mode enabled, an analyst can describe the investigation to perform instead of constructing each search.

Questions about Splunk and Stellar Cyber

What do Splunk and Stellar Cyber sell?
Splunk sells Splunk Cloud Platform, Splunk Enterprise, Splunk Enterprise Security, Federated Search, Splunk AI Assistant and 3 more. Stellar Cyber sells Stellar Cyber Open XDR Platform.
Are Splunk and Stellar Cyber in the same category?
Yes. SIEM is the primary category of both on CISO Tribune.
Where are Splunk and Stellar Cyber headquartered?
Splunk is headquartered in San Jose, United States.
When were Splunk and Stellar Cyber founded?
Splunk was founded in 2003.
Who owns Splunk and Stellar Cyber?
Splunk is owned by Cisco. Stellar Cyber is privately held.
Which customers do Splunk and Stellar Cyber name?
Splunk publicly names Carrefour, Intel, FINRA, Alaska Airlines and Honda of Alabama.
Who are Splunk and Stellar Cyber sold to?
From its own pages, Splunk sells mainly to organisations that want security, observability, and AI data on one platform. Stellar Cyber describes its open SecOps platform as built for lean security teams and MSSPs.
What have Splunk and Stellar Cyber announced recently?
September 15, 2026: Cisco released Cisco AI POD for Splunk, which brings Splunk AI features to on-premises customers on Cisco infrastructure with NVIDIA computing. October 5, 2026: Stellar Cyber announced version 7.0 of its security operations platform, adding AI case triage, case metrics and expanded automated response.

About Splunk

Splunk sells a data platform for security, observability, and AI, and says the platform unifies petabyte-scale machine data wherever it lives.

Splunk says its unified platform gives teams cross-domain context for security, observability, and AI and keeps telemetry where it lives. Splunk says teams can search and analyze data where it lives to reduce costs. Splunk says its platform preserves full access and context for AI and analytics without the ingest tax or unnecessary data movement.

On the security side, Splunk says adversaries using AI are shrinking remediation windows from months to minutes. Splunk says its answer combines unified data, advanced TDIR, and AI agents that enable experts to mitigate threats across any attack surface. Splunk says teams can use AI agents and assistants to predict and prevent issues, eliminate toil, and accelerate remediation safely. Splunk describes a SOAR system that integrates orchestration, playbook automation, and case management. Splunk names Splunk Enterprise Security, Splunk IT Service Intelligence, and the Splunk Common Information Model as Splunk solutions that use pre-written macros.[1][12][17]

Splunk describes AI Assistant in Security as available to cloud customers of Splunk Enterprise Security, and says it automates repetitive steps and guides analysts in daily investigation workflows. Splunk describes a Triage Agent, in alpha, that evaluates, prioritises, and explains alerts. Splunk describes an Automation Builder Agent, in alpha, that turns natural language into SOAR playbooks. Splunk describes a Malware Threat Reversing Agent for customers of Splunk Attack Analyzer that summarizes threats by breaking down malicious scripts.[18]

Splunk Cloud Platform is described as a way to collect, index, and visualize data in the cloud. Splunk Enterprise is described as collecting, indexing, and visualizing data using an on-premises engine. Splunk describes Splunkbase as the place to discover, share, and install apps and add-ons with the Splunk community. Splunk says teams can connect and act on data through integrations and apps on Splunkbase, across cloud, SaaS, IT, and machine data from OT and IoT. Splunk says teams can instrument with native OpenTelemetry support, SDKs, and agents.[12]

Splunk describes Federated Search as the unifying search layer across the data estate, covering Splunk-managed locations and supported customer-managed stores such as Amazon S3 and Snowflake. Splunk describes Splunk AI Assistant as a natural-language entry point to the search workflow. Agent Mode is available in Splunk AI Assistant 2.1 or later for supported Splunk Cloud Platform and Cloud Connected deployments running Splunk platform 10.1 or later. Splunk describes the Splunk AI Toolkit as providing step-by-step guided workflows to build and deploy models for common business challenges.[19][20]

Splunk says Splunk Edge Processor applies cryptographic functions to data in real time as the data flows within an on-premises environment. Splunk says ODBC-enabled apps such as Microsoft Excel, Power BI, and Tableau can connect to the Splunk platform, with SQL queries used to interact with the server. Splunk describes Splunk Log Observer Connect as an integration that lets logs on Splunk Enterprise or Splunk Cloud Platform be queried and associated with Related Content in Splunk Observability Cloud.[12][19][21][22]

On the observability side, Splunk says teams can use AI SRE agents to isolate root causes across environments and identify targeted fixes such as rollbacks or capacity adjustments. Splunk says teams can track LLM token usage with visibility and attribution. Splunk describes a healthcare organization using the Splunk platform to monitor and analyze logs generated from medical devices.[12][13][14][19][21]

Splunk on the record

Sources

Splunk full record

  1. [1]ProductsSplunk · splunk.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Cisco completes acquisition of splunkCisco · newsroom.cisco.com · published March 18, 2024 · Tier A
  3. [3]Get the most out of splunk infrastructure monitoring and splunk itsiSplunk · splunk.com · published November 17, 2020 · Tier A
  4. [4]Contact usSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A
  5. [5]CarrefourSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A
  6. [6]IntelSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A
  7. [7]FinraSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A
  8. [8]Alaska airlinesSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A
  9. [9]HondaSplunk · splunk.com · undated page, accessed October 10, 2026 · Tier A
  10. [10]Cisco delivers trusted ai at scale through new splunk advancementsCisco · newsroom.cisco.com · published September 15, 2026 · Tier A
  11. [11]Cisco buys galileo strengthen splunks agentic monitoring capabilitiesSiliconANGLE · siliconangle.com · published April 9, 2026 · Tier B
  12. [12]Get Data In | Platform (last updated lastModifiedISO)Splunk · undated page, accessed October 28, 2026 · Tier A
  13. [13]Analytics Story: Warzone RAT | Splunk Security ContentSplunk · published May 13, 2026 · Tier A
  14. [14]Analytics Story: Trickbot | Splunk Security ContentSplunk · published May 13, 2026 · Tier A
  15. [15]Splunk | Data Platform for Security, Observability & AISplunk · undated page, accessed October 28, 2026 · Tier A
  16. [16]Splunk Enterprise Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed October 28, 2026 · Tier C
  17. [17]Using advanced macros - Splunk LanternSplunk Lantern · undated page, accessed November 3, 2026 · Tier A
  18. [18]L’IA au service de la sécurité | SplunkSplunk · undated page, accessed November 3, 2026 · Tier A
  19. [19]Investigating and searching across your data estate with Cisco Data Fabric powered by the Splunk platform - Splunk LanternSplunk Lantern · undated page, accessed November 3, 2026 · Tier A
  20. [20]Preparing data for use with the Splunk AI Toolkit - Splunk LanternSplunk Lantern · undated page, accessed November 3, 2026 · Tier A
  21. [21]De-identifying PII consistently with hashing in Edge Processor - Splunk LanternSplunk Lantern · undated page, accessed November 3, 2026 · Tier A
  22. [22]Using Log Observer Connect with Cloud Platform - Splunk LanternSplunk Lantern · undated page, accessed November 3, 2026 · Tier A
  23. [23]Splunk Launches Hosted Generative AI Models: Native-AI Insights, Zero Setup, Maximum SecuritySplunk · published February 18, 2026 · Tier A
  24. [24]Announcing Splunk Enterprise 10.2 & Splunk Cloud Platform 10.2 – Next Generation Querying & AnalyticsSplunk · published January 16, 2026 · Tier A
  25. [25]Splunk Observability + Galileo: Bridging the AI Trust GapSplunk · published May 28, 2026 · Tier A

Stellar Cyber full record

  1. [1]ProductStellar Cyber · stellarcyber.ai · published February 25, 2026 · Tier A
  2. [2]Stellar cyber announces agentic ai autonomous soc in 6 4 0 releaseStellar Cyber · stellarcyber.ai · published March 16, 2026 · Tier A
  3. [3]Stellar cyber named one of americas best startup employersStellar Cyber · stellarcyber.ai · published November 21, 2024 · Tier A
  4. [4]ISOC Platform with AI SIEM, NDR, Open XDR & Multi-Layer AIStellar Cyber · undated page, accessed October 29, 2026 · Tier A
  5. [5]Stellar Cyber Automation-driven SecOps PlatformStellar Cyber · undated page, accessed November 10, 2026 · Tier A
  6. [6]Stellar Cyber vs Sumo Logic: Expert SIEM Solution ComparisonStellar Cyber · undated page, accessed November 10, 2026 · Tier A
  7. [7]Stellar Cyber vs Splunk: In-Depth SIEM Solution ComparisonStellar Cyber · undated page, accessed November 10, 2026 · Tier A
  8. [8]Integrated Security Operations Center (ISOC) PlatformStellar Cyber · undated page, accessed November 10, 2026 · Tier A
  9. [9]SC vs Microsoft Sentinel: Comprehensive SIEM SolutionStellar Cyber · undated page, accessed November 10, 2026 · Tier A
  10. [10]SC vs. CrowdStrike | Compare Leading Cybersecurity PlatformsStellar Cyber · undated page, accessed November 10, 2026 · Tier A
  11. [11]EDR Software, Endpoint Detection & ResponseStellar Cyber · undated page, accessed November 10, 2026 · Tier A
  12. [12]Stellar Cyber Autonomous SOC PlatformStellar Cyber · undated page, accessed November 10, 2026 · Tier A
  13. [13]Stellar Cyber Multi-Layer AI™ | Advanced AI Platform for SecOpsStellar Cyber · undated page, accessed November 10, 2026 · Tier A
  14. [14]Stellar Cyber AI SIEM | AI-Driven SIEM PlatformStellar Cyber · undated page, accessed November 10, 2026 · Tier A
  15. [15]Stellar Cyber vs AlienVault: In-Depth SIEM Solution ComparisonStellar Cyber · undated page, accessed November 10, 2026 · Tier A
  16. [16]Stellar Cyber 7.0 Makes the Agentic SOC Measurable, Actionable and Operational at ScaleStellar Cyber · published October 5, 2026 · Tier A

Spot a factual error? Request a correction.