{"id":25180,"date":"2025-09-15T09:00:00","date_gmt":"2025-09-15T13:00:00","guid":{"rendered":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/?p=25180"},"modified":"2025-09-10T20:36:10","modified_gmt":"2025-09-11T00:36:10","slug":"exabeam-and-cribl-expand-partnership-to-drive-data-first-security-outcomes","status":"publish","type":"post","link":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/ai\/exabeam-and-cribl-expand-partnership-to-drive-data-first-security-outcomes.html","title":{"rendered":"Exabeam and Cribl Expand Partnership to Drive Data-First Security Outcomes"},"content":{"rendered":"\n<p><strong>Key Takeaways:<\/strong><\/p>\n\n\n\n<ul>\n<li>Exabeam and Cribl announced an enhanced partnership to integrate Exabeam\u2019s New-Scale Security Operations Platform with Cribl Stream, aiming to reduce the trade-off between security visibility and cost.<\/li>\n\n\n\n<li>The collaboration emphasizes targeted ingestion of high-value data, optimized storage, and behavioral analytics to improve threat detection and investigation.<\/li>\n\n\n\n<li>Exabeam Outcomes Navigator and Nova Advisor Agent help identify critical data sources, while Cribl ensures efficient routing and long-term storage management.<\/li>\n\n\n\n<li>Executives from both companies highlight that better data leads to faster investigations and stronger defenses, with AI-driven detection playing a central role.<\/li>\n\n\n\n<li>The joint solution provides flexibility in data routing, historical replay capabilities, and reduced operational costs for enterprises.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p>Exabeam and Cribl have announced an expansion of their strategic partnership, bringing together their respective strengths to help security teams achieve more effective threat detection while managing costs. The announcement builds on their 2023 collaboration and centers on integrating the Exabeam New-Scale Security Operations Platform with Cribl Stream. Together, the companies say the integration allows organizations to ingest and prioritize high-fidelity security data, reduce storage expenses, and maintain the ability to search and replay historical data on demand.<\/p>\n\n\n\n<p>At the heart of the enhanced partnership are two Exabeam technologies: Outcomes Navigator and the Nova Advisor Agent. These tools guide security teams in identifying which data sources deliver the most impactful outcomes. Once identified, Cribl Stream routes that data into the New-Scale Platform, where Exabeam applies AI-driven analytics to create detections and threat timelines that support investigations. This process is designed to ensure that every log ingested contributes directly to business-critical use cases and MITRE ATT&amp;CK coverage, while less valuable data can be shifted into lower-cost storage without losing searchability.<\/p>\n\n\n\n<p>A major challenge for many organizations is balancing the need for visibility against the rising cost of data storage. Exabeam argues that its behavioral analytics help uncover threats that traditional security tools may overlook, particularly insider threats. By combining those capabilities with Cribl\u2019s data pipeline flexibility, the companies believe security teams gain greater efficiency and clarity in their operations.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"800\" src=\"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-content\/uploads\/2025\/09\/image.jpeg\" alt=\"Profile photo of Steve Wilson\" class=\"wp-image-25181\" style=\"width:352px;height:auto\" srcset=\"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-content\/uploads\/2025\/09\/image.jpeg 800w, https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-content\/uploads\/2025\/09\/image-90x90.jpeg 90w, https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-content\/uploads\/2025\/09\/image-768x768.jpeg 768w, https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-content\/uploads\/2025\/09\/image-300x300.jpeg 300w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><figcaption class=\"wp-element-caption\">Steve Wilson, Chief AI and Product Officer at Exabeam<\/figcaption><\/figure><\/div>\n\n\n<p>Steve Wilson, Chief AI and Product Officer at Exabeam, described the significance of the integration. \u201cOne of the differentiated strengths of the New-Scale Platform is the AI we provide powered through the data we ingest,\u201d Wilson said. \u201cWorking with Exabeam, Cribl helps our customers achieve two important goals, delivering the data to support strategic security outcomes, and controlling cost. This partnership gives security teams the clarity, control, and confidence to detect real threats faster and outpace adversaries with precision.\u201d<\/p>\n\n\n\n<p>The companies outlined several advantages for customers adopting the combined solution:<\/p>\n\n\n\n<ul>\n<li><strong>Targeted Data Ingestion<\/strong> ensures only strategic, high-value logs are used to support key security use cases.<\/li>\n\n\n\n<li><strong>Accelerated Platform Adoption<\/strong> helps organizations minimize downtime during migration to Exabeam\u2019s platform.<\/li>\n\n\n\n<li><strong>Flexible Data Routing<\/strong> allows movement of data across any security tool without new agents or infrastructure.<\/li>\n\n\n\n<li><strong>Long-Term Storage Optimization<\/strong> provides options to use customer-managed or cloud-based cold storage, reducing cost while preserving compliance.<\/li>\n\n\n\n<li><strong>Historical Search and Replay<\/strong> enables forensic investigations across months or years of archived data.<\/li>\n\n\n\n<li><strong>Data Filtering<\/strong> removes low-value logs to reduce SIEM overhead and free analyst capacity.<\/li>\n<\/ul>\n\n\n\n<p>Vlad Melnik, Vice President of Global Alliances at Cribl, emphasized the importance of clean, relevant data. \u201cAn effective threat detection, investigation, and response strategy starts with clean, high-value data\u2014because better data leads to better decisions, faster investigations, and stronger defenses,\u201d Melnik said. He added that the combination of Cribl\u2019s routing and shaping capabilities with Exabeam\u2019s behavioral analytics allows customers to streamline SIEM ingestion and pursue security objectives more efficiently. \u201cIt\u2019s a smarter, more sustainable path to cyber resilience.\u201d<\/p>\n\n\n\n<p>The move comes as organizations increasingly seek outcome-driven approaches to cybersecurity. By decoupling data volume from security outcomes, the partnership between Exabeam and Cribl reflects a shift toward strategies that prioritize relevance and cost-effectiveness. For enterprises facing both regulatory pressures and resource constraints, this combination could provide an avenue to maintain visibility without escalating expenses.<\/p>\n\n\n\n<p>The emphasis on AI-driven detection also highlights the growing role of automation in security operations. Exabeam\u2019s behavioral analytics layer, combined with Cribl\u2019s control over data ingestion, presents an approach intended to empower teams to focus on actionable insights rather than noise. The ability to replay historical data for compliance and investigations further supports long-term resilience.<\/p>\n\n\n\n<p>As cyber threats grow more sophisticated and budgets remain under scrutiny, partnerships like this suggest that security providers are rethinking how data pipelines and analytics platforms interact. The Exabeam\u2013Cribl collaboration underscores an industry-wide effort to align efficiency with security outcomes, providing a model that other vendors may follow.<\/p>\n\n\n\n<p><strong>Le<em>arn how AI Agents can supercharge your company\u2019s profits and productivity at&nbsp;<a href=\"http:\/\/www.tmcnet.com\/\">TMC\u2019s&nbsp;<\/a><a href=\"https:\/\/www.aiagentevent.com\/\">AI Agent Event<\/a> Sept 29-30, 2025 in DC.<\/em><\/strong><\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><a href=\"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-content\/uploads\/2025\/07\/AiAgent-500x600-Speaker-logos-v3.jpg\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"500\" src=\"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-content\/uploads\/2025\/07\/AiAgent-500x600-Speaker-logos-v3.jpg\" alt=\"\" class=\"wp-image-23949\"\/><\/a><\/figure><\/div>\n\n\n<p><em>Rich Tehrani serves as CEO of&nbsp;<a href=\"http:\/\/www.tmcnet.com\/\">TMC<\/a>&nbsp;and chairman of&nbsp;<a href=\"http:\/\/www.itexpo.com\/\">ITEXPO<\/a>&nbsp;#TECHSUPERSHOW Feb 10-12, 2026 and is CEO of&nbsp;<a href=\"https:\/\/www.rt-advisors.com\/\">RT Advisors<\/a>&nbsp;and is&nbsp;a Registered Representative (investment banker) with and offering securities through&nbsp;<a href=\"https:\/\/www.4pointscapital.com\/\">Four Points Capital Partners LLC&nbsp;<\/a>(Four Points) (Member FINRA\/SIPC). He handles capital\/debt raises as well as M&amp;A. RT Advisors is not owned by Four Points.<\/em><\/p>\n\n\n\n<p>The above is not an endorsement or recommendation to buy\/sell any security or sector mentioned. No companies mentioned above are current or past clients of RT Advisors &#8211; howebver Tehrani is the FusionScore.ai founder.<\/p>\n\n\n\n<p>The views and opinions expressed above are those of the participants. While believed to be reliable, the information has not been independently verified for accuracy. Any broad, general statements made herein are provided for context only and should not be construed as exhaustive or universally applicable.<\/p>\n\n\n\n<p><em>Portions of this article may have been developed with the assistance of artificial intelligence, which may have contributed to ideation, content generation, factual review, or editing<\/em>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Key Takeaways: Exabeam and Cribl have announced an expansion of their strategic partnership, bringing together their respective strengths to help security teams achieve more effective threat detection while managing costs. The announcement builds on their 2023 collaboration and centers on integrating the Exabeam New-Scale Security Operations Platform with Cribl Stream. Together, the companies say the<\/p>\n","protected":false},"author":44,"featured_media":25183,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[194],"tags":[],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/posts\/25180"}],"collection":[{"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/users\/44"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/comments?post=25180"}],"version-history":[{"count":1,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/posts\/25180\/revisions"}],"predecessor-version":[{"id":25182,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/posts\/25180\/revisions\/25182"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/media\/25183"}],"wp:attachment":[{"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/media?parent=25180"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/categories?post=25180"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.tmcnet.com\/blog\/rich-tehrani\/wp-json\/wp\/v2\/tags?post=25180"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}