Tenzir provides an agentic telemetry pipeline for data-driven cyber defenders.
- Categories
- Security data pipelines
- Based in
- Hamburg, Germany
- Founded
- 2017
- Ownership
- Private
About Tenzir
Tenzir sells a telemetry pipeline for security teams. It gathers events from cloud providers, on-premises systems and SaaS tools, then cleans, labels and sends them onward. The company describes its product as an agentic pipeline, meaning software agents turn a stated goal into a working pipeline. Buyers are security operations teams, national CERTs, managed detection providers and large enterprises. Events pass through stages for collection, parsing, shaping, normalization, enrichment, detection, optimization and routing. Data is mapped to OCSF and can also be translated into ASIM, ECS, CIM or UDM. Noise is diverted to a data lake while alerts continue to SIEM, SOAR and XDR tools. Tenzir says this lowers SIEM ingest bills and keeps the full record in storage the customer controls. Pipelines are written as code in TQL, a language both people and AI agents can produce. Tenzir runs as a single binary, embeds Fluent Bit, and can be deployed on-premises, in an EU region or air-gapped. Detection uses TQL rules, Sigma rules and YARA scans inside the pipeline.
Products
- TenzirA streaming pipeline that collects, normalizes, enriches, detects on and routes security telemetry.
- Tenzir NodesDeployable pipeline instances that can run on Kubernetes through Helm.
- Tenzir PlatformA hosted service where organizations give teams a shared home and nodes connect through a corporate proxy.
- Tenzir SkillsA package that teaches coding agents how a customer's data stack is arranged.
- TQLThe pipeline language used to express collection, parsing, shaping, normalization, protection and routing steps.
Ownership and deals
- Raised $3m in a seed roundInvestor eCAPITAL ENTREPRENEURIAL PARTNERSReport on the Tenzir funding round of August 2023 (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.