Cribl Launched Detect SIEM Product
The company integrated two 2026 acquisitions to launch a federated security tool designed to cut data analysis costs.
Updated on Sept. 29, 2026 in Cybersecurity
Live Poll
Do you trust that new data-management software will actually lower your long-term business operating costs?
Cribl has officially launched Detect, a new security information and event management (SIEM) product. The software uses federated search to analyze data directly at its source, an approach the company claims can reduce customer costs by up to 50%.
Why it matters
The product aims to address high data ingestion and query costs by decoupling security analysis from traditional volume-based billing models. By enabling re-analysis without repeated charges, it targets the expense associated with modern enterprise security operations.
Detect is priced at $18,000 to $20,000 per TB per month, scaling based on underlying infrastructure rather than ingestion volume. It leverages federated search — a technique that executes queries across multiple data sources in situ — to avoid the costs of moving and re-indexing data.
The players
Cribl
A provider of data observability and security infrastructure focused on streaming analytics.
The details
The platform integrates intellectual property from Cribl's 2026 acquisitions, specifically data engineering vendor CardinalOps and incident triage developer Radiant Security. By combining these capabilities with existing streaming analytics, Detect allows security teams to run investigations directly against the data where it resides. This architecture avoids traditional SIEM models that charge based on the total volume of data ingested or the number of queries performed.
Timeline
July 2026: Cribl acquired data engineering vendor CardinalOps.
August 2026: Cribl acquired incident triage player Radiant Security.
September 2026: Cribl launched the Detect SIEM product.
The Tech Race
Detect enters a competitive SIEM market dominated by vendors that rely on ingestion-based pricing. It marks a shift toward infrastructure-based billing as firms look to curb the mounting costs of managing massive enterprise security datasets.
Enterprise security teams can now evaluate whether moving to an infrastructure-based cost model reduces their monthly spend compared to existing volume-dependent contracts. The transition requires auditing current data storage locations to ensure compatibility with Detect's federated search architecture.
The takeaway
Cribl is attempting to commoditize security data by removing the search-volume tax that often hinders incident investigations. Security buyers should monitor how well the federated approach maintains query performance speeds as the scale of the underlying data infrastructure grows.
Further reading
For broader trends in security analytics, see Cybersecurity.
Live Poll
Do you trust that new data-management software will actually lower your long-term business operating costs?
