Channel Account Manager - UKI

Exabeam expands Craig Patterson's role to SVP of Global Channels & Marketing. Sep 21, 2026 - 12:34 Patterson assumes leadership of the entire marketing organization, including brand, messaging, demand generation, communications, field marketing, and account developmen Exabeam, a leader in Behavior Intelligence for the agentic enterprise, today announced that Craig Patterson has been named SVP of Global Channels & Marketing, reporting to CEO Pete Harteveld. A member of the company's executive leadership team, Patterson retains leadership of the global partner ecosystem he has led since joining Exabeam in 2025 and assumes leadership of the entire marketing organization, including brand, messaging, demand generation, communications, field marketing, and account development. The expanded role more closely aligns Exabeam's marketing and channel strategies as the company scales a new security category. Agent Behavior Analytics (ABA) extends behavioral detection beyond human users to AI agents and machine identities operating inside the enterprise, which increasingly have access to the same systems and data as human users. ABA baselines each agent's normal pattern of activity and flags the ones that drift from it. "New categories aren't built through a vendor's website alone. Customers adopt them when someone they trust can explain why they matter, and in security that trusted voice is often a partner. Bringing demand and channel closer together gives us a better way to build that understanding at scale." - Craig Patterson, SVP - Global Channels & Marketing, Exabeam The shift in how security is bought is structural. Omdia found that 92% of global cybersecurity spending flowed through the channel in Q4 2025, a materially higher share than technology overall, where partners account for roughly two-thirds of IT spend. In security, partners are no longer simply a route to market. They increasingly shape how customers discover, evaluate and adopt new technologies. New categories are won through education, and in security that education happens through partners. Exabeam generates most of its revenue through its partner ecosystem, and the expanded role is intended to align how the company builds demand with how its customers learn, evaluate, and buy. Under Patterson, partner considerations will be integrated into brand, messaging and demand generation from the outset rather than treated as a separate go-to-market motion. "We created this category, and partners will be critical to how we scale it. Aligning marketing and channels under Craig's leadership means we can build that partner perspective into our strategy from day one. Craig challenges the status quo, and that is exactly why we gave him this." - Pete Harteveld, CEO of Exabeam "Our partners play a critical role in how customers find us, evaluate us and decide to buy," said Pete Harteveld, CEO of Exabeam. "We created this category, and partners will be critical to how we scale it. Aligning marketing and channels under Craig's leadership means we can build that partner perspective into our strategy from day one. Craig challenges the status quo, and that is exactly why we gave him this." Since joining Exabeam, Patterson has led the integration of the Exabeam and LogRhythm partner organizations following one of cybersecurity's most significant mergers, and architected the Exabeam APEX Partner Program, a competency-based global framework that rewards partner capability rather than deal volume. In CRN's 2026 Annual Report Card, Exabeam swept the AI Security category, taking first place across all four subcategories, with partners scoring the company 98.3 for ease of doing business. "New categories aren't built through a vendor's website alone," said Patterson. "Customers adopt them when someone they trust can explain why they matter, and in security that trusted voice is often a partner. Bringing demand and channel closer together gives us a better way to build that understanding at scale." Patterson has spent more than two decades building go-to-market engines in cybersecurity and technology. Before Exabeam, he served as SVP of Global Sales and Global Channel Chief at Aryaka and led global post-merger integration at Level 3 and CenturyLink. He is a five-time CRN Channel Chief and was named to CRN's 50 Most Influential Channel Chiefs in 2026. He was named Channel Futures Channel Influencer of the Year in 2023 and to CRN's Top 100 Executives in 2026.

Google backs Exabeam for Unified Security. August 27, 2026 Google named Exabeam a Google Unified Security Recommended partner. Google launched this program in 2025 with three inaugural members: CrowdStrike, Fortinet and Wiz. Since then, Google has reportedly added Palo Alto Networks, with Exabeam now expected to join the list. This designation recognizes the strength of combining Exabeam New-Scale Analytics with Google Security Operations. Google SecOps' cloud-native security operations platform empowers security teams to better detect, investigate, and respond to cybersecurity threats. Exabeam extends Google SecOps with behavioural intelligence, enabling faster insider threat detection, investigation, and response. The Exabeam solution connects directly with Google Security Operations data, enabling users to work within a single integrated view. With Exabeam, users identify patterns and react faster to risks that remain hidden when viewing individual events. Using integrated data sharing, analysts apply Exabeam's behavioural intelligence to a wider dataset. This helps identify actual issues, flag false positives early and saves time on diagnosis. Pete Harteveld, CEO of Exabeam, commented, "Being named a Google Unified Security Recommended partner reflects the strength of our collaboration with Google Cloud and the value we deliver together for customers. "Security teams are struggling with alert overload. What they're missing is insight into the behaviors that represent real risk to their enterprise. Our work with Google Cloud brings this behavioral intelligence directly into Google Security Operations, helping customers identify abnormal activity in the context of behavior across both human users and AI agents." Unified solution. Both platforms run on Google Cloud, allowing security teams to share data without incurring egress charges. This removes the need to move data into a separate analytics environment and reduces operational complexity. The integration offers several additional benefits: * Accelerate TDIR workflows: Exabeam validation testing showed organizations accelerating TDIR workflows by up to 80%. * Detect insider risk earlier: Apply New-Scale Analytics to Google Security Operations data to identify high-risk activity across users, entities, service accounts, and AI agents. * Reduce analytics complexity: Use integrated data sharing to apply Behaviour Intelligence to data already in Google Security Operations without maintaining a separate analytics environment. * Available on Google Cloud Marketplace: Procure Exabeam New-Scale Analytics through Google Cloud Marketplace, where eligible purchases can apply toward existing Google Cloud spend commitments. * Secure both users and agents: Extend coverage to AI agents by analysing Gemini Enterprise Agent Platform and Model Armor activity alongside user behaviour, behavioural analytics, dynamic risk scoring, and agent-powered TDIR workflows to detect risky human and non-human identity activity. Securing AI agents is more important than ever. AI agents can now work across apps, tools, data and business processes. That makes them useful, but it also makes them harder to monitor. Google describes Google Unified Security as an AI-infused approach. It uses Gemini and threat intelligence to support security workflows at scale. While individual agent actions often resemble human behaviour and appear low-risk, significant concerns remain. Chen et al, in How Your Credentials Are Leaked by LLM Agent Skills: An Empirical Study (June 2026), found several examples. The study identified a cumulative risk: 73.5% of vulnerabilities stemmed from debug logging. Individually, a log statement is benign. However, when an agent executes 100+ tool invocations, and each logs a token, the cumulative exposure becomes a data exfiltration channel. It also identified that 89.6% of the affected agent skills were exploitable during routine execution without elevated privileges. Thus, proving that "normal" behaviour can still leak credentials when viewed as a sequence. Addressing the agentic challenge. Exabeam states its New-Scale Analytics adds behavioural analytics, dynamic risk scoring, and AI-powered investigations to Google Security Operations. The Exabeam solution integrates with Gemini Enterprise Agent Platform and Model Armor to mitigate this risk. * Gemini Enterprise Agent Platform helps organisations build, manage and govern enterprise AI agents. In this context, it provides activity signals that can be reviewed alongside other security data. * Model Armor gives teams more information about large language model activity, including prompts and responses, so that this activity can be assessed as part of security monitoring. Those signals can help security teams see how agents behave, which systems they use and where unusual activity may appear. Exabeam analyses this activity in New-Scale Fusion alongside user behaviour. It designed its New-Scale Analytics product to learn normal activity, apply risk scores, and highlight activity that needs investigation. Exabeam also says its Nova cybersecurity agents can support threat detection, investigation and response workflows by adding behavioural context and helping analysts prioritise work. Dr. Andre Alfred, Sr. Director, Cloud Security Threat Operations, Google Cloud, stated, "As organizations shift toward AI-driven security, operations and autonomous agents, open interoperability across the technology stack is vital. "The Google Unified Security Recommended program creates deep technical collaboration with market-leading security vendors to minimize integration overhead, enabling security teams to focus on outcomes rather than complexity. We're excited to welcome Exabeam to the Google Unified Security Recommended program to help customers strengthen their defenses with unified, AI-driven protection." Enterprise times: what does this mean. Using Exabeam's new scale analytics, security teams can better leverage its behavioural intelligence to spot anomalous patterns from both humans and agents. With agents now capable of performing many more tasks than humans, it is critical that organisations have the ability to track, monitor and analyse events faster than ever before. Using Exabeam and Google SecOps, teams can benchmark normal behaviour and better detect and identify anomalies. No matter how small, that signal compromised accounts, malicious insiders, or risky AI agent behaviour. Security teams can now better identify evolving trends and patterns through the platform. They can react faster and mitigate risks as they emerge. Google Security Operations customers can access Exabeam New-Scale Analytics through Google Cloud Marketplace, where eligible purchases count toward existing Google Cloud spend commitments.

Exabeam vs. Splunk: which approach improves security operations outcomes? * Jul 23, 2026 * Heidi Willbanks * 3 minutes to read Table of Contents Not every SIEM solution is built for modern security operations. While Splunk is widely used for log management, many teams face unpredictable pricing, complex tuning, and slow investigations as environments scale. New-Scale Fusion takes a different approach, It combines behavioral analytics, dynamic risk scoring, and coordinated AI agents to help teams detect risk earlier and move investigations forward faster. Here are six ways Exabeam improves outcomes compared to Splunk. 1. Predictable costs and clear value. Splunk cloud workload pricing model is complex and often unpredictable. Costs scale based on ingestion, storage, compute, and add-ons, which can lead to overages and rising spend as environments grow. Exabeam includes analytics, automation, and threat intelligence within New-Scale Fusion. As data volume increases, you gain more detection coverage and automation without layering on additional modules. Outcome: More predictable cost structure with increasing value over time. 2. Less tuning and operational overhead. Splunk requires continuous tuning. Analysts must maintain Splunk Search Processing Language (SPL) queries, build correlations, and reduce false positives through manual adjustments. Behavioral analytics capabilities are bundled into higher-tier offerings, increasing cost and complexity. Migration paths between legacy and newer capabilities can introduce additional operational risk. Exabeam reduces this overhead with: * Prebuilt detection coverage * Behavioral analytics for users, entities, and agents * Contextual correlation and automated workflows Analysts move from detection to investigation in a single interface without custom scripting. Outcome: Faster time to value and less reliance on engineering resources. 3. Strong behavioral visibility across humans, devices, and agents. Most modern attacks involve credential misuse or lateral movement. Rules alone are not enough to detect these patterns. Splunk provides behavior-based detection, but it often requires extensive tuning and operates outside a unified investigation workflow. Exabeam applies: ABA extends behavioral analytics to AI agents and non-human identities. It correlates activity across users, devices, and agents into a single investigation flow so analysts can understand how behaviors interact within an attack sequence. While Splunk can monitor agent activity and assign risk scores, it approaches this from an observability perspective. Exabeam integrates agent behavior directly into the investigation workflow, so all related activity is analyzed together. Outcome: Faster identification of high-risk behavior with unified investigation context. 4. Cloud-Native architecture built for scale. Splunk Cloud is a managed version of an architecture originally designed for on-premises deployments. Scaling often requires planning for storage, compute, and performance constraints. New-Scale Fusion is cloud native. It: * Processes high event volumes at scale * Unifies ingestion, parsing, analytics, and detection * Provides real-time visibility into service health and consumption OpenAPI Standard (OAS) support enables integration with broader security and IT ecosystems. Outcome: Consistent performance and visibility as data and complexity grow. 5. AI agents that drive investigation and detection outcomes. Splunk AI Assistant focuses on generating SPL queries and summaries. Its use is limited and often dependent on specific configurations. Exabeam Nova is a coordinated system of seven AI agents embedded into the detection, investigation, and response workflow: * Advisor Agent: Provides posture insights, MITRE ATT&CK(R) alignment, and prioritized recommendations through Outcomes Navigator * Search Agent: Converts natural language into Exabeam Query Language (EQL) aligned to the Common Information Model (CIM) * Visualization Agent: Build dashboards and charts from search results * Threat Scoring Agent: Applies adaptive learning to prioritize activity with dynamic risk scores * Investigation Agent: Generates summaries and recommends next steps * Analyst Assistant Agent: Surfaces evidence and guides investigators in real time * Rule Creator Agent: Translates natural language and observed attack patterns into correlation rules aligned to CIM and ATT&CK to accelerate detection coverage These agents work together within a unified workflow, reducing manual effort and improving investigation consistency. Outcome: Faster investigations, improved prioritization, and reduced analyst workload. 6. Measurable detection coverage with Outcomes Navigator. Security teams often lack visibility into whether their SIEM is detecting meaningful threats and how gaps translate to business risk. Splunk Security Essentials (SSE) is a content library that helps teams implement security use cases and map detections to frameworks like ATT&CK. While it highlights detection gaps, it provides limited visibility into exposure and only indirect insight into business risk. Outcomes Navigator delivers: * Detection coverage mapped to ATT&CK * Visibility into gaps and exposure * Prioritized recommendations aligned to business outcomes It continuously tracks detection performance and program maturity without requiring custom dashboards. Outcome: Clear visibility into detection coverage and next steps to reduce risk. Conclusion. Log search alone can't meet the demands of modern security operations. Exabeam combines behavioral analytics, dynamic risk scoring, automated timelines, and AI agents to detect hidden risk in human, device, and agent activity. You gain a unified investigation workflow, faster response times, and measurable improvements in your security program without needing to rebuild your entire stack. Download the full comparison guide to see how to reduce cost, improve detection coverage, and accelerate investigations. Heidi Willbanks. Heidi Willbanks | Senior Product Marketing Manager, Content | Exabeam | Heidi Willbanks leads content strategy and go-to-market execution at Exabeam, focusing on product launches, cybersecurity solutions marketing, and technical alliances. She has 20+ years of marketing experience, including over a decade in information security and data privacy, and holds a Level IV certification from Pragmatic Institute. Heidi specializes in creating clear, technically accurate content for security practitioners and decision-makers. Learn about the Exabeam platform and expand your knowledge of information security with its collection of white papers, podcasts, webinars, and more.