Security data lakes and pipelines
Products that route, reduce and store security telemetry, often separately from where detection runs.
7 vendors · alphabetical, never ranked
- AnomaliAnomali sells a security operations platform combining a data lake, threat intelligence and AI agents that triage and investigate alerts.Ownership not established
- CriblCribl sells a telemetry data platform for IT and security teams, including Cribl Stream, which routes and shapes data, Cribl Lake, a managed data lake for that telemetry, and Cribl Search, which queries it across storage destinations.Privately held · primary category
- DevoDevo sells a security data platform that ingests and stores large volumes of security telemetry and orchestrates which data is kept hot for real-time analytics, with integrated SIEM, SOAR and UEBA.Privately held · primary category
- HuntersHunters sells a cloud-native SOC platform that ingests, retains and correlates security data to detect, investigate and respond to threats, along with Pathfinder AI, an agentic AI capability that automates alert triage and investigation.Ownership not established
- PantherPanther sells an AI SOC platform that combines a security data lake, detection-as-code rules and an AI layer, so that analyst investigation outcomes feed back into the detections that generated the alerts.Ownership not established
- SplunkSplunk sells a platform that collects and correlates machine data for security and IT operations, including a security information and event management product and a security orchestration and automation product.Owned by Cisco
- Sumo LogicSumo Logic sells a cloud SIEM that triages alerts and correlates threats from log data, along with a related security and compliance product built on the same log platform.Owned by Francisco Partners since 2023
No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.