Skip to content

Securing the Future of Work: Agent Behavior Analytics with Google Cloud — Read the Blog

Exabeam and Cribl Partner to Power Scalable, High-Fidelity Threat Detection with Next-Gen Data Pipelines

  • Sep 15, 2025
  • 3 minutes to read

Partnership advances an outcome-driven data strategy, decoupling security outcomes from data volume

BROOMFIELD, Colo. & FOSTER CITY, Calif. — September 15, 2025 — Exabeam, a global leader in intelligence and automation that powers security operations, and Cribl, the Data Engine for IT and Security, today announced an evolution of their strategic partnership designed to break the trade-off between cost and visibility. Building on their 2023 collaboration, this integration brings together the Exabeam New-Scale Security Operations Platform with Cribl Stream to help organizations ingest and prioritize the right data, optimize long-term storage costs, and retain the ability to search historical data on demand.

At the center of the partnership enhancements are Exabeam Outcomes Navigator and the Exabeam Nova Advisor Agent, which help customers identify the data sources that drive the most impactful security outcomes. Cribl then routes this high-fidelity data into the Exabeam New-Scale Platform where it is transformed into AI-driven detections and threat timelines to power investigations. This partnership ensures that every log ingested supports business critical use-cases and MITRE ATT&CK® coverage, eliminating painful trade-offs. At the same time, low-value data can be offloaded to more cost-efficient storage while remaining searchable so organizations can control storage costs and retain the ability to replay logs for historical investigations.

Unlike other SIEMs, Exabeam provides the behavioral context needed to detect the threats other tools overlook, such as insider threats. By integrating the advanced threat detection, investigation, and response (TDIR) capabilities of Exabeam with Cribl’s flexible data pipeline management, security teams gain new efficiency and drive strategic outcomes.

“One of the differentiated strengths of the New-Scale Platform is the AI we provide powered through the data we ingest,” said Steve Wilson, Chief AI and Product Officer at Exabeam. “Working with Exabeam, Cribl helps our customers achieve two important goals, delivering the data to support strategic security outcomes, and controlling cost. This partnership gives security teams the clarity, control, and confidence to detect real threats faster and outpace adversaries with precision.”

Key Benefits of the Exabeam–Cribl Partnership:

  • Targeted Data Ingestion: Ingests only the strategic, high-fidelity data needed to power your most important security use cases.
  • Accelerated Platform Adoption: Minimizes downtime and data migration hurdles when transitioning to the New-Scale Platform.
  • Flexible Data Routing: Routes data to and from any security tool—no new agents or infrastructure required.
  • Long-Term Storage Optimization: Enables customers to bring their own storage or leverage cloud-based, cost-effective storage options, at reduced costs without sacrificing compliance or searchability.
  • Historical Search and Replay: Retain the ability to run forensic investigations and compliance audits across months or years of archived data, at much lower cost than traditional SIEM storage.
  • Data Filtering: Eliminates low-value or noisy logs to boost SIEM performance, reduce cost, and reclaim analyst bandwidth.

“An effective threat detection, investigation, and response strategy starts with clean, high-value, AI-ready data      because better data leads to better decisions, faster investigations, and stronger defenses,” said Vlad Melnik, Vice President, Global Alliances at Cribl. “By combining Cribl’s flexible data routing and shaping capabilities with behavioral analytics and automation from Exabeam, we’re enabling customers to streamline SIEM data ingestion, achieve their security goals more efficiently, and fuel their AI-powered SIEM. It’s a smarter, more sustainable path to cyber resilience.”

To learn more about the Exabeam and Cribl partnership, please visit: https://www.exabeam.com/partners/cribl/

About Exabeam
Exabeam is a leader in intelligence and automation that powers security operations for the world’s smartest companies. As a global cybersecurity innovator, Exabeam provides industry-proven, security-focused, and flexible solutions for faster, more accurate threat detection, investigation, and response (TDIR). Cutting-edge technology enhances security operations center performance, optimizing workflows and accelerating time to resolution. With consistent leadership in AI innovation and a proven track record in security information and event management (SIEM) and user behavior analytics, Exabeam empowers global security teams to combat cyberthreats, mitigate risk, and streamline operations.

Real Intelligence. Real Security. Real Fast.

Learn more at www.exabeam.com

About Cribl
Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy. Customers use Cribl’s vendor-agnostic solutions to analyze, collect, process, and route all IT and security data from any source or to any destination, delivering the choice, control, and flexibility required to adapt to their ever-changing needs. Cribl’s product suite, which is used by Fortune 1000 companies globally, is purpose-built for IT and Security, including Cribl Stream, the industry’s leading observability pipeline, Cribl Edge, an intelligent vendor-neutral agent, Cribl Search, the industry’s first search-in-place solution, and Cribl Lake, a turnkey data lake. Founded in 2018, Cribl is a remote-first workforce with an office in San Francisco, CA.

Contacts 
Cheyenne Wells
PR for Exabeam 
[email protected]

Learn More About Exabeam

Learn about the Exabeam platform and expand your knowledge of information security with our collection of white papers, podcasts, webinars, and more.

  • White Paper

    Using MITRE ATT&CK® in Threat Hunting and Detection

  • Webinar

    LogRhythm SIEM: October 2025 Quarterly Launch

  • Webinar

    New-Scale Security Operations Platform: October 2025 Quarterly Launch

  • Blog

    Can You Detect Intent Without Identity? Securing AI Agents in the Enterprise 

  • Show More