Cribl Adds Agentic Detection Engineering & Boosts SecOps With CardinalOps Deal
Cribl, a telemetry processing platform, has acquired CardinalOps to bolster its security operations capabilities. This acquisition will allow Cribl customers to map their existing detection rules and security controls to the MITRE ATT&CK framework, identifying gaps in coverage and operationalizing threat intelligence. Cribl is aiming to move beyond simply collecting data to actively managing detection posture, offering a more streamlined solution for security teams.
Cribl, a telemetry processing platform, has acquired CardinalOps to bolster its security operations capabilities. This acquisition will allow Cribl customers to map their existing detection rules and security controls to the MITRE ATT&CK framework, identifying gaps in coverage and operationalizing threat intelligence. Cribl is aiming to move beyond simply collecting data to actively managing detection posture, offering a more streamlined solution for security teams.
Cribl, founded in 2018 by former Splunk architects, has experienced rapid growth, increasing from $1 million in annual recurring revenue to $300 million in ARR in less than four years. The company has raised over $600 million and is now valued at $3.5 billion after a recent Series E round. Cribl is currently used by over half of the Fortune 100 and 35% of the Fortune 500, with more than 1,000 employees, including Myke Lyons, CISO at Kroger, who recently joined Cribl.
CardinalOps’s acquisition will provide Cribl customers with a more comprehensive approach to security, moving beyond data collection and storage to actively managing detection coverage. This integration will help security teams identify and address gaps in their existing security controls, ensuring they are effectively mitigating potential threats. Cribl’s CEO and co-founder, Clint Sharp, envisions the company becoming a public company in the future.