Panther Labs

Panther Labs builds a cloud-native SIEM and detection platform built around the idea that security data should live in the data warehouse an organization already runs, not a proprietary store the SIEM vendor controls. Panther runs natively on top of Snowflake or Databricks, letting customers keep security logs in infrastructure they already own, query it with SQL, and apply detection rules written as Python, an architectural bet against the traditional SIEM model where log ingestion, storage, and licensing costs scale together and often become the single biggest line item in a security operations budget.

Founded in 2018 in San Francisco by Jack Naglieri, Panther has raised roughly $140 million across four rounds, including a $120 million Series B at a $1.4 billion valuation led by ICONIQ Growth and Snowflake Ventures, and a $68 million Series C in January 2023 at an undisclosed valuation. The platform ships with more than 200 built-in detection rules and policies mapped to the MITRE ATT&CK and CIS frameworks, along with dashboards that track detection coverage against those frameworks directly.

Documented customer case studies, such as energy staffing and vendor-management company Workrise, describe choosing Panther specifically to avoid the operational overhead and storage costs of a traditional SIEM while still building custom detections and KPIs quickly, a credible, independently reported example of the cost and complexity tradeoff Panther is built around, even as the company competes in a crowded field against both legacy SIEM incumbents and newer cloud-native security data platforms.