cybersecdirectory

Security data pipeline vendors

We list 24 companies active in security data pipelines, and 13 of them have it as their main focus. 3 are public, 6 are owned by another company and 15 are private. Most are based in the United States (20). The oldest, Gigamon, was founded in 2004. By revenue from annual reports, the largest company here is CrowdStrike ($4.8bn in FY2026). Read the security data pipeline market guide 2026. Featured listing. Realm.Security, based in Boston, sells a SOC-aware security data pipeline that cuts the volume sent to the SIEM without breaking threat detections.

By countryUnited States 20

Companies focused on security data pipelines

12 companies
CompanyBased inFoundedSizeOwnershipRevenue
Axoflow

Axoflow provides an autonomous security data layer that curates and manages security data for SecOps.

Budapest, Hungary2023Private
Cribl

Cribl provides a vendor-agnostic platform for managing, investigating, and analyzing telemetry data.

San Francisco, United States2018Private
DataBahn

DataBahn provides an agentic data control plane for managing and optimizing enterprise telemetry.

Dallas, United States2023Private
Edge Delta

Telemetry pipelines that route, enrich and transform security and observability data to SIEMs and other destinations, plus AI agents for site reliability work.

Seattle, United StatesPrivate
Gigamon

Gigamon sells a deep observability pipeline that collects network traffic and turns it into telemetry for security and monitoring tools.

Santa Clara, United States2004Owned by Elliott Investment Management
Mezmo

Mezmo sells an open-source agent harness called AURA, which runs in a customer's own environment using their tools, telemetry and operational context.

San Jose, United States2015Private
Sawmills

Sawmills provides an agentic telemetry management platform.

San Mateo, United States2024Private
Tenzir

Tenzir provides an agentic telemetry pipeline for data-driven cyber defenders.

Hamburg, Germany2017Private
VirtualMetric

VirtualMetric provides a security data pipeline platform that collects, normalizes, enriches, filters, and routes data to SIEMs.

Amsterdam, Netherlands2016Private
Bindplane

OpenTelemetry pipeline that collects, reduces, masks and routes logs and other telemetry to SIEM, storage and observability tools.

United StatesPrivate
Observo AI

Observo AI built an AI-native security data pipeline that filtered and enriched telemetry before it reached the SIEM.

Newark, United States2022Part of SentinelOne
Onum

Onum built a real-time telemetry pipeline that filtered, enriched and routed security data in stream.

Madrid, Spain2022Part of CrowdStrike

Also active in security data pipelines

11 companies
CompanyBased inFoundedSizeOwnershipRevenue
CrowdStrike

CrowdStrike provides AI-native cybersecurity solutions to stop breaches.

Austin, United States20117,925 staffPublic, CRWD$4.8bn (FY2026)
Elastic

Elastic provides the Elasticsearch Platform, which includes search, observability, and security solutions.

Mountain View, United States2012Public, ESTC$1.7bn (FY2026)
SentinelOne

SentinelOne provides an AI-native cybersecurity platform for endpoint, identity, and cloud protection.

Mountain View, United States2013Public, S$1.0bn (FY2026)
Abstract Security

Abstract provides a composable SIEM platform for security operations.

United States2023Private
Censys

Censys maps internet infrastructure and provides intelligence for security operations and exposure management.

Ann Arbor, United States2017Private
GitHub

GitHub is a software development platform where developers, agents, and code come together.

San Francisco, United States2007Part of Microsoft
ReversingLabs

ReversingLabs provides software supply chain security and threat intelligence to verify and secure enterprise software.

Cambridge, United StatesPrivate
Splunk

Splunk provides a data platform for security, observability, and AI.

San Jose, United States2004Owned by Cisco
Sumo Logic

Sumo Logic provides cloud log management, monitoring, and SIEM tools for security and operations teams.

Redwood City, United States2010Owned by Francisco Partners
Axonius

Asset intelligence platform that builds one inventory of every asset from connected IT and security tools to find coverage gaps and prioritise exposures.

New York, United StatesPrivate
Cohesity

Data security and backup platform with immutable backups, threat detection and ransomware recovery, protecting more than 1,000 workload types.

Santa Clara, United StatesPrivate

Recent deals in security data pipelines

All security data pipelines deals
DateDealAmountSource
July 2026CrowdStrike acquired XM CyberSource for CrowdStrike buying XM Cyber, opens in a new tabUndisclosedSource for CrowdStrike buying XM Cyber, opens in a new tab
July 2026Cribl acquired CardinalOpsSource for Cribl buying CardinalOps, opens in a new tabUndisclosedSource for Cribl buying CardinalOps, opens in a new tab
January 2026CrowdStrike acquired SGNLSource for CrowdStrike buying SGNL, opens in a new tab$740mSource for CrowdStrike buying SGNL, opens in a new tab
January 2026CrowdStrike acquired Seraphic SecuritySource for CrowdStrike buying Seraphic Security, opens in a new tab$420mSource for CrowdStrike buying Seraphic Security, opens in a new tab
8 Sept 2025SentinelOne acquired Observo AISource for SentinelOne buying Observo AI, opens in a new tab$225mSource for SentinelOne buying Observo AI, opens in a new tab
September 2025CrowdStrike acquired PangeaSource for CrowdStrike buying Pangea, opens in a new tabUndisclosedSource for CrowdStrike buying Pangea, opens in a new tab
27 Aug 2025CrowdStrike acquired OnumSource for CrowdStrike buying Onum, opens in a new tab$290mSource for CrowdStrike buying Onum, opens in a new tab
August 2025SentinelOne acquired Prompt SecuritySource for SentinelOne buying Prompt Security, opens in a new tab$250mSource for SentinelOne buying Prompt Security, opens in a new tab
July 2025Axonius acquired CynerioSource for Axonius buying Cynerio, opens in a new tab$100mSource for Axonius buying Cynerio, opens in a new tab
November 2024CrowdStrike acquired Adaptive ShieldSource for CrowdStrike buying Adaptive Shield, opens in a new tabUndisclosedSource for CrowdStrike buying Adaptive Shield, opens in a new tab

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.

See every category

Often listed alongside security data pipelines