Security data pipeline vendors
We list 24 companies active in security data pipelines, and 13 of them have it as their main focus. 3 are public, 6 are owned by another company and 15 are private. Most are based in the United States (20). The oldest, Gigamon, was founded in 2004. By revenue from annual reports, the largest company here is CrowdStrike ($4.8bn in FY2026). Read the security data pipeline market guide 2026. Featured listing. Realm.Security, based in Boston, sells a SOC-aware security data pipeline that cuts the volume sent to the SIEM without breaking threat detections.
By countryUnited States 20
Featured
Featured listings are promoted placements, shown here and labelled.
| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
FeaturedRealm.Security Realm Security provides a SOC-aware security data pipeline that reduces SIEM log volume without breaking threat detections. | Boston, United States | 2024 | Private |
Companies focused on security data pipelines
12 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
Axoflow Axoflow provides an autonomous security data layer that curates and manages security data for SecOps. | Budapest, Hungary | 2023 | Private | ||
Cribl Cribl provides a vendor-agnostic platform for managing, investigating, and analyzing telemetry data. | San Francisco, United States | 2018 | Private | ||
DataBahn DataBahn provides an agentic data control plane for managing and optimizing enterprise telemetry. | Dallas, United States | 2023 | Private | ||
Edge Delta Telemetry pipelines that route, enrich and transform security and observability data to SIEMs and other destinations, plus AI agents for site reliability work. | Seattle, United States | Private | |||
Gigamon Gigamon sells a deep observability pipeline that collects network traffic and turns it into telemetry for security and monitoring tools. | Santa Clara, United States | 2004 | Owned by Elliott Investment Management | ||
Mezmo Mezmo sells an open-source agent harness called AURA, which runs in a customer's own environment using their tools, telemetry and operational context. | San Jose, United States | 2015 | Private | ||
Sawmills Sawmills provides an agentic telemetry management platform. | San Mateo, United States | 2024 | Private | ||
Tenzir Tenzir provides an agentic telemetry pipeline for data-driven cyber defenders. | Hamburg, Germany | 2017 | Private | ||
VirtualMetric VirtualMetric provides a security data pipeline platform that collects, normalizes, enriches, filters, and routes data to SIEMs. | Amsterdam, Netherlands | 2016 | Private | ||
Bindplane OpenTelemetry pipeline that collects, reduces, masks and routes logs and other telemetry to SIEM, storage and observability tools. | United States | Private | |||
O Observo AI Observo AI built an AI-native security data pipeline that filtered and enriched telemetry before it reached the SIEM. | Newark, United States | 2022 | Part of SentinelOne | ||
Onum Onum built a real-time telemetry pipeline that filtered, enriched and routed security data in stream. | Madrid, Spain | 2022 | Part of CrowdStrike |
Also active in security data pipelines
11 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
CrowdStrike CrowdStrike provides AI-native cybersecurity solutions to stop breaches. | Austin, United States | 2011 | 7,925 staff | Public, CRWD | $4.8bn (FY2026) |
Elastic Elastic provides the Elasticsearch Platform, which includes search, observability, and security solutions. | Mountain View, United States | 2012 | Public, ESTC | $1.7bn (FY2026) | |
SentinelOne SentinelOne provides an AI-native cybersecurity platform for endpoint, identity, and cloud protection. | Mountain View, United States | 2013 | Public, S | $1.0bn (FY2026) | |
Abstract Security Abstract provides a composable SIEM platform for security operations. | United States | 2023 | Private | ||
Censys Censys maps internet infrastructure and provides intelligence for security operations and exposure management. | Ann Arbor, United States | 2017 | Private | ||
GitHub GitHub is a software development platform where developers, agents, and code come together. | San Francisco, United States | 2007 | Part of Microsoft | ||
ReversingLabs ReversingLabs provides software supply chain security and threat intelligence to verify and secure enterprise software. | Cambridge, United States | Private | |||
Splunk Splunk provides a data platform for security, observability, and AI. | San Jose, United States | 2004 | Owned by Cisco | ||
Sumo Logic Sumo Logic provides cloud log management, monitoring, and SIEM tools for security and operations teams. | Redwood City, United States | 2010 | Owned by Francisco Partners | ||
Axonius Asset intelligence platform that builds one inventory of every asset from connected IT and security tools to find coverage gaps and prioritise exposures. | New York, United States | Private | |||
Cohesity Data security and backup platform with immutable backups, threat detection and ransomware recovery, protecting more than 1,000 workload types. | Santa Clara, United States | Private |
Recent deals in security data pipelines
All security data pipelines dealsAcquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.