CardinalOps

Cybersecurity · AI · Telemetry

Acquisition

Cribl reportedly acquires Israeli startup CardinalOps for around $100M

The deal fuses telemetry management with detection engineering, tackling SIEMs that catch barely a fifth of known attack techniques.

• Cribl, the AI Platform for Telemetry, acquired Israeli cybersecurity startup CardinalOps in a deal reportedly valued at around $100 million; the companies have not officially disclosed terms.
• Founded in 2020, CardinalOps builds agentic AI detection engineering software that maps security controls against real-world adversary behavior and automates SOC threat coverage analysis.
• Cribl will bring CardinalOps' employees into the company and open a new Tel Aviv office, expanding its footprint in Israel's cybersecurity ecosystem.
• CardinalOps research found organizations typically ingest data covering about 90% of MITRE ATT&CK techniques, yet their SIEMs only have detections for roughly 21% of those techniques, with about 13% of rules broken.
• Cribl says its annual recurring revenue exceeds $300 million, positioning the deal as a platform-first push toward a federated, open alternative to traditional SIEM stacks.
• The acquisition signals a shift in security spending from raw data ingestion toward proving detections actually work, a gap legacy SIEM pricing models have long obscured.