Cribl helps tech teams manage and understand their data through data observability. Its two main products, Cribl Stream and Cribl Edge, collect, route, transform, and analyze logs, metrics, and other observability data. Edge gathers real-time data from network edge devices, sending it to Stream or other destinations for processing. Stream routes and transforms data on-premises or in the cloud and forwards it to destinations, with integrations like Office 365 and Microsoft Azure to monitor activity and security. The goal is to give teams real-time visibility into data, improve operational efficiency, and strengthen security by managing data flows and observability insights.
Work here?Claim your company
Industries
Company Size
1,001-5,000
Company Stage
Series E
Total Funding
$596.4M
Headquarters
San Francisco, CA
Founded
2018
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Total Funding
$596.4M
Above
Industry Average
Funded Over
7 Rounds
Industry standards
Announcing telemetry decision Bench and cribl-decision-2. Last edited: November 2, 2026 Earlier this month, Cribl released cribl-decision-1.0, its first open-weight decision model. Today, Cribl is following that up with two new releases from the Cribl AI Research Lab: * Telemetry Decisions Bench: A public benchmark and leaderboard for evaluating decision models on more than 4,800 production-like IT, security, and telemetry tasks. * cribl-decision-2: A new series of open-weight decision models trained specifically for telemetry, with significant improvements over its first release. Telemetry for IT and security is full of decisions. Is an alert suspicious? Does an event match a known attack technique? Should a log be retained, dropped, or routed somewhere else? These use cases are good candidates for decision models, which select from a set of options and return confidence scores rather than generating text. But they also present challenges that aren't well represented in most general-purpose AI benchmarks. Models need to understand messy, semi-structured data, specialized schemas, and security context, often while operating under tight latency and cost constraints. Cribl wanted to understand which models actually perform well on these tasks, and how much Cribl could improve performance by training specifically for the domain.
Cribl x Fireworks AI: SecIT joins the Specialized Intelligence Index. Last edited: October 28, 2026 SecIT Bench is now part of the Fireworks Specialized Intelligence Index. When the Cribl AI Research Lab launched SecIT Bench in August, its goal was simple: give IT and security practitioners a clearer picture of which models perform best in their domain. Today, Cribl is taking that vision further. Cribl is partnering with Fireworks AI to bring SecIT Bench into the Specialized Intelligence Index as a benchmark in its Security / SRE category, giving practitioners another way to evaluate AI models against real-world domain expertise, not just general intelligence.
Cribl announces 2026 Customer Award winners leading the way in telemetry and AI. Moody's, ServiceNow, and Prudential Financial among organizations recognized with the inaugural Cribl GOAT Customer Awards. September 30, 2026 10:00 ET | Source: Cribl SAN FRANCISCO, Sept. 30, 2026 (GLOBE NEWSWIRE) - Cribl, the AI Platform for Telemetry, today announced the winners of its first Cribl GOAT Customer Awards at CriblCon 2026. The awards recognize organizations and partners that are using Cribl to take control of their telemetry data, operate at massive scale, prepare for AI-driven workflows, and help their companies succeed. The 2026 Cribl GOAT Customer Award winners are: * Data in Control: Moody's * Scale Without Limits: ServiceNow * AI Acceleration: Prudential Financial and University of Nebraska * Partner Innovation: Blackwood Associates "Our customers run some of the most demanding environments in the world, and this year's winners are setting the standard for what great Security and IT look like," said Abby Strong, Chief Customer Officer at Cribl. "They've taken control of their data and put it to work on the problems that matter most to their business. We're proud to celebrate them, and we're excited to keep building with them for whatever comes next." To learn more about the Cribl GOAT Customer Awards and this year's winners, visit https://cribl.io/customer-awards/. About Cribl Cribl is the AI Platform for Telemetry, purpose-built for IT and security data. Cribl's platform is a single, shared infrastructure that powers its own SIEM, observability, AI SOC, and other solutions, alongside custom applications people and AI agents build on top of it. Cribl provides a control plane to route and govern AI traffic, protect sensitive data, and monitor AI usage, cost, performance, and risk, so they can investigate issues and take action faster. Trusted by over half of the Fortune 100, Cribl gives IT and security teams the choice, control, and flexibility to build custom tools, run ready-made solutions, or route data anywhere, without paying to store it twice. Founded in 2018, Cribl is remote-first with an office in San Francisco. Media Contact: [email protected]
Introducing Cribl Detect, delivering a new way to SIEM. A complete security information and event management (SIEM) built on the platform security teams already trust. September 29, 2026 10:00 ET | Source: Cribl SAN FRANCISCO, Sept. 29, 2026 (GLOBE NEWSWIRE) - Cribl, the AI Platform for Telemetry, today announced Cribl Detect, built on the company's open data platform to provide a complete SIEM at up to 50% less cost than other companies. Cribl Detect gives security teams a better way to detect, investigate, and respond to threats without locking their telemetry into another monolithic, single-vendor stack. Cribl's new platform-first approach lets customers adapt and customize their SIEM to their unique security operations. This announcement brings Cribl into the $8.2 billion SIEM market. AI-generated attacks increase both the speed and sophistication of threats, putting pressure on security teams to detect and respond faster. Since Cribl Detect runs on the company's agentic AI-powered platform, with built-in inference and an agentic runtime, it can move beyond static, rules-based detection. Intelligence from Cribl's AI security operations center (AI SOC) capabilities helps automate detection and investigation workflows, applying analytics closer to the data to surface high-fidelity, actionable signals, reduce noise, and prioritize the threats that matter most. Together, these capabilities help security teams find blind spots and improve security outcomes. Security teams face difficult choices with today's SIEMs For years, security teams frustrated with their SIEMs have faced two flawed options. Legacy monolithic SIEMs offer integration without choice, forcing customers into one vendor's schema, one vendor's pricing model, and per-gigabyte economics that turn analysis into a tax. Newer "SIEM-less" stacks assembled on general-purpose data platforms offer choice without integration. Teams get to pick their tools, but they also become the integrator, stitching together separate schemas, contracts, and pipelines themselves. Cribl Detect is designed to offer the best parts of both: the openness and customizability of a platform-first approach with the comprehensive out-of-the-box detection, investigation, and response capabilities of a purpose-built solution. This same platform approach powers Cribl's expanding portfolio of solutions. "Customers don't want the SIEM they have today, and they don't have the resources to build the SIEM they want," said Clint Sharp, co-founder and CEO of Cribl. "With Cribl Detect, we've taken a different approach that solves both problems - an out-of-the-box SIEM experience built on a highly flexible platform specifically for telemetry that allows customers to adapt, mold, and even rebuild the SIEM for their specific needs. And because the platform natively integrates inference and an agentic runtime, Cribl Detect goes beyond rigid rules to catch fast-moving AI threats." Skip the "DIY" headaches While a "do it yourself" approach to SIEM and security operations can sound appealing, enterprises are rarely prepared to build and support what they need. Cribl's new way to SIEM offers an alternative that starts with the same telemetry organizations already access using the Cribl platform they already trust, in open formats they can control. This means Cribl Detect's alerts, investigations, and analytics can run against data wherever it resides, rather than being confined or duplicated to a monolithic, single-vendor stack. With Cribl Detect, federation allows analysts to investigate across distributed telemetry in pipelines, data lakes, object stores, and existing tools. Cribl also applies detections in-stream as telemetry moves through the pipeline, bringing security logic to the data wherever it flows, getting the right signals moving earlier, so correlation and investigation can happen faster. A key differentiator of Cribl Detect is that its detections and detection posture management (DPM), triage with AI security operations center (AI SOC), security orchestration/automation/response (SOAR), and compliance/governance capabilities all inherit access to any data available in the platform. This makes it possible to run the product without having to move historical data first. "Cribl Detect brings together two capabilities that matter to practitioners: investigating across data they already control and identifying detection gaps, broken rules, and missing telemetry," said Francis Odum, cybersecurity researcher at Software Analyst Cyber Research. "Building these capabilities into its existing data platform is a compelling direction for Cribl, giving security teams a path to modernize their SOC without creating another proprietary data silo." Built-In DPM and AI triage to accelerate incident response Cribl Detect includes detection posture management that gives security teams a continuously updated view of what they are and aren't detecting. Cribl Detect not only maps existing detections against MITRE ATT&CK techniques, surfacing coverage gaps, broken or noisy rules, and missing telemetry, but also provides recommendations and workflows for fast remediation. Alongside rules-based detections, AI SOC intelligence powers automated detection techniques that catch threats rules alone would miss. AI-driven triage, investigation, and disposition technology then helps analysts move from alert to answer faster, without manually correlating data across tools. Organizations that adopt Cribl Detect can expect lower total costs than incumbent SIEMs, since it is priced on infrastructure rather than an analysis tax. Cribl Detect is available now for Cribl.Cloud customers. To learn more, read its blog. About Cribl Cribl is the AI Platform for Telemetry, purpose-built for IT and security data. Cribl's platform is a single, shared infrastructure that powers its own SIEM, observability, AI SOC, and other solutions, alongside custom applications people and AI agents build on top of it. Cribl provides a control plane to route and govern AI traffic, protect sensitive data, and monitor AI usage, cost, performance, and risk, so they can investigate issues and take action faster. Trusted by over half of the Fortune 100, Cribl gives IT and security teams the choice, control, and flexibility to build custom tools, run ready-made solutions, or route data anywhere, without paying to store it twice. Founded in 2018, Cribl is remote-first with an office in San Francisco. Media Contact: [email protected]
Cribl has acquired technology assets from Radiant Security's AI-based security operations centre solution. The acquisition includes intellectual property for autonomously qualifying, analysing, and processing security alerts. The deal marks Cribl's second security technology acquisition this year, following CardinalOps in July. Cribl will integrate the AI-driven SOC technology into its telemetry data platform, enabling security teams to ensure AI makes appropriate decisions based on relevant data. The platform generates custom qualification logic for each alert rather than relying on predefined playbooks, executing investigations directly from telemetry data regardless of storage location. This approach aims to improve threat detection and reduce false positives. Cribl CEO Clint Sharp said the acquisition addresses data silos in the $121 billion security market, providing security teams with comprehensive insights as AI transforms operations.
Find jobs on Simplify and start your career today
Don't see your dream role? Check out thousands of other roles on Simplify.Browse all jobs
Industries
Company Size
1,001-5,000
Company Stage
Series E
Total Funding
$596.4M
Headquarters
San Francisco, CA
Founded
2018
Find jobs on Simplify and start your career today
Don't see your dream role? Check out thousands of other roles on Simplify.Browse all jobs