Cribl has acquired technology assets from Radiant Security’s AI-native security operations center product, expanding the company’s security capabilities with technology designed to autonomously triage, investigate and resolve security alerts. The acquisition includes intellectual property associated with Radiant Security’s AI SOC technology. Financial terms of the transaction were not disclosed.
Cribl plans to adapt the acquired technology to operate as an application on its broader telemetry data platform.
The strategy is intended to give security teams AI-driven investigation capabilities that operate directly against the telemetry data underlying their security environments.
Cribl believes that combining AI SOC functionality with its open telemetry infrastructure can reduce the data fragmentation that often limits security operations.
The company pointed to what it describes as a $121 billion security market in which many security products continue to operate through separate data silos.
Cribl’s platform is designed to make telemetry data usable regardless of where that information resides, creating a common data foundation for security, observability and AI applications.
The acquired AI SOC technology is designed to generate triage logic dynamically for individual security alerts rather than relying entirely on preconfigured playbooks.
Investigations can then execute against telemetry data across the organization.
Cribl expects the combination to help security teams identify threats more effectively, reduce false positives and improve the quality of incident investigations.
The transaction also represents Cribl’s second security technology acquisition in a short period.
Cribl acquired CardinalOps in July, and the Radiant Security transaction further expands the company’s move beyond telemetry management and into security operations.
The company believes AI is changing the economics of standalone security products.
Capabilities that previously operated as separate applications can increasingly run on a shared telemetry platform, potentially reducing the number of independent data stores and disconnected tools security organizations must manage.
Cribl is positioning its telemetry infrastructure as the underlying platform on which multiple AI-powered security and observability applications can operate.
That model is intended to allow AI systems to access a broader and more consistent set of telemetry while enabling customers to maintain flexibility in how they construct their security technology stacks.
Cribl’s vendor-agnostic platform is designed to keep telemetry portable and interoperable while helping enterprises manage growing data volumes and varieties.
The company is trusted by organizations including approximately half of the Fortune 100.
The Radiant Security acquisition is part of a broader expansion of the Cribl platform, with additional capabilities expected to be unveiled at CriblCon on September 28, 2026.
KEY QUOTES:
“Too much of the $121 billion security market is trapped in data silos, giving security teams incomplete information. We’re breaking that cycle.”
“By pairing AI SOC technology with Cribl’s open telemetry platform, we’re ending the era of siloed solutions and giving security teams the intelligence they need, right when AI is reshaping the entire operations landscape.”
Clint Sharp, Co-Founder and CEO of Cribl
“Cribl’s approach centers on transforming raw telemetry into a unified foundation for AI-driven applications.”
“By layering AI SOC, threat detection, and observability on top of its open data platform, Cribl is enabling organizations to customize their security stacks and finally unlock the true value of their data.”
Andrew Braunberg, Principal Analyst at Omdia
