Databricks
A data-and-AI platform building a lakehouse-native security analytics stack via Panther Labs, Antimatter, SiftD, and Lakewatch.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Databricks, founded in 2013 and based in San Francisco, is a privately held data-and-AI platform that has assembled a security-analytics stack through acquisitions of Panther Labs (a cloud-native SIEM and threat-detection vendor valued at about $1.4 billion), Antimatter (confidential-computing data protection), and SiftD, and has launched a product called Lakewatch.
It lets security teams run detection and analytics natively on the lakehouse where their data already lives, positioning it against SIEM incumbents, although it is not a cybersecurity-native vendor.
Innovation Matrix Assessment
Rapidly assembled a SIEM/detection stack (Panther, Antimatter, SiftD) and shipped the Lakewatch product within roughly a year.
Well-resourced, high-growth data platform company with the engineering capacity to integrate multiple security acquisitions.
Three security-related acquisitions (Panther Labs, Antimatter, SiftD) plus a new SIEM product launch in a short window signal aggressive momentum in the cybersecurity M&A market.
Bringing SIEM/threat-detection natively into a data lakehouse is a genuinely different architecture from bolt-on SIEM tools, though the category itself is established.
Lakewatch and the underlying Panther technology are newly integrated, so real-world efficacy at scale is still being proven.
Unifying security telemetry with the data platform addresses a real CISO pain point (data silos across SIEM and analytics), though adoption is early.
Why CISOs Should Care
Databricks gives CISOs a security/data-lakehouse angle by acquiring Panther Labs (~$1.4B valuation, cloud-native SIEM and threat detection) plus Antimatter and SiftD, and launching Lakewatch, letting security teams run detection and analytics natively on the same lakehouse platform already storing their enterprise data.
What Makes It Different
Rather than building SIEM from scratch, Databricks is assembling a security analytics stack (Panther's detection engine, Antimatter's confidential-computing data protection, SiftD, and the new Lakewatch product) directly on top of its data-and-AI platform, targeting security teams that want detection running where their data already lives.
The Matrix Verdict
55/100 — INCUMBENT
A fast-growing data-and-AI platform company extending into security analytics through targeted acquisitions (Panther Labs, Antimatter, SiftD) rather than a cybersecurity-native vendor, positioned to compete with SIEM incumbents by leveraging its existing lakehouse footprint.
Editorial Note: Claims vs. Verified Findings
Databricks' core business is a unified data-and-AI analytics platform; the SIEM/threat-detection capability (Lakewatch, built on Panther Labs) is a 2025-2026 expansion, not the company's founding business.
Sources
- Databricks Newsroom
- Coverage of the Panther Labs acquisition and Lakewatch SIEM launch (2026)
Alternatives to Databricks
Abnormal AI
AI-native behavioral security platform that analyzes sender identity and communication patterns, rather than message content alone, to stop…
Palo Alto Networks Cortex XSIAM
Palo Alto Networks' AI-driven 'autonomous SOC' platform that unifies SIEM, EDR, SOAR, and attack-surface data into a single…
7AI
7AI, founded by Cybereason's former CEO and CTO, deploys autonomous AI agents that triage, investigate, and correlate security…
Sevii
CISO ReviewedAgentic AI platform positioning itself around autonomous threat elimination rather than alerting, using AI agents to investigate and…
Fenix24
Chattanooga-based ransomware recovery specialist that has restored operations after 500+ real-world incidents, including 30 Fortune 500 companies.
Artemis Security
A New York AI-native SOC platform correlating identity, network and cloud signals into attack narratives, already counting Wix…