Cribl has announced the acquisition of technology assets from Radiant Security, including an AI-native security operations center (SOC) product. This acquisition includes intellectual property that allows for autonomous triage, investigation, and resolution of security alerts. This move represents Cribl's deeper venture into the security sector by adapting the AI SOC technology as an application within its telemetry data platform. This development aims to enhance security teams' capabilities by enabling AI-assisted decisions based on precise data.
Clint Sharp, co-founder and CEO of Cribl, remarked, “Too much of the $121 billion security market is trapped in data silos, giving security teams incomplete information. We’re breaking that cycle. By pairing AI SOC technology with Cribl’s open telemetry platform, we’re ending the era of siloed solutions and giving security teams the intelligence they need, right when AI is reshaping the entire operations landscape.”
Transforming Incident Response
With the integration of this technology, Cribl's platform can make telemetry data more usable, which helps expedite and improve the accuracy of threat investigations. The AI SOC capabilities allow for customized triage logic to be dynamically generated for alerts rather than relying on static playbooks. This approach conducts investigations directly on the telemetry data, wherever it is located, enabling security teams to detect threats more effectively and reduce false positives. These innovations aim to streamline incident response into a more unified and reliable process.
These innovations aim to streamline incident response into a more unified and reliable process
This acquisition marks the second for Cribl in the security technology space this year, following its July acquisition of CardinalOps. As AI continues to evolve the landscape of security operations, the deployment of capabilities through a shared telemetry platform may replace the need for standalone products, which often create additional data silos.
Transforming Raw Telemetry
Andrew Braunberg, Principal Analyst at Omdia, noted, “Cribl’s approach centers on transforming raw telemetry into a unified foundation for AI-driven applications. By layering AI SOC, threat detection, and observability on top of its open data platform, Cribl is enabling organizations to customize their security stacks and finally unlock the true value of their data.”
This acquisition is part of a larger strategy for Cribl's platform. Further enhancements are expected, with more details to be shared at CriblCon on September 28, 2026.
