SiftD
A San Francisco agentic security-engineering startup founded by ex-Splunk engineers, folded into Databricks' Lakewatch SIEM.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
SiftD.ai, based in San Francisco and founded by former Splunk engineers, was building agentic automation for security engineering before its acquisition, and now forms part of the foundation for Databricks’ Lakewatch SIEM product.
Its team and technology are being folded directly into Databricks’ data-platform-native security offering, a talent-and-technology acquisition with undisclosed terms; its efficacy will be judged through Lakewatch rather than SiftD directly.
Innovation Matrix Assessment
Agentic automation for security engineering is a relevant direction, though SiftD's own public product maturity was limited pre-acquisition.
Operational value is realized through its incorporation into Databricks' Lakewatch, not as a standalone deployed product.
March 2026 acquisition by Databricks, ahead of its reported IPO, to launch a new Claude-powered SIEM product is a strong momentum signal.
Contributes to Databricks' bid to establish a new "security lakehouse" category, though SiftD itself is a component, not the disruptor.
No independent efficacy data exists for the pre-acquisition product.
AI-driven SIEM/security-data-platform convergence is a significant, durable industry direction.
Why CISOs Should Care
SiftD.ai, founded by former Splunk engineers, was building agentic automation for security engineering before its acquisition, now forming part of the foundation for Databricks' new Lakewatch SIEM product.
What Makes It Different
Rather than a standalone product, SiftD's team and technology are being folded directly into Databricks' data-platform-native security offering, betting that a lakehouse-native architecture (versus bolted-on SIEM integrations) is the differentiator.
The Matrix Verdict
40/100 — EMERGING / UNRANKED
A talent-and-technology acquisition (undisclosed terms) that is more about accelerating Databricks' entry into the SIEM market via Lakewatch than about SiftD as a standalone product; real-world efficacy will be judged through Lakewatch, not SiftD directly.
Editorial Note: Claims vs. Verified Findings
SiftD had a minimal public product footprint prior to acquisition; treat any security-automation efficacy claims as unproven until Databricks' Lakewatch platform has independent evaluation.
Sources
Alternatives to SiftD
Abnormal AI
AI-native behavioral security platform that analyzes sender identity and communication patterns, rather than message content alone, to stop…
Palo Alto Networks Cortex XSIAM
Palo Alto Networks' AI-driven 'autonomous SOC' platform that unifies SIEM, EDR, SOAR, and attack-surface data into a single…
7AI
7AI, founded by Cybereason's former CEO and CTO, deploys autonomous AI agents that triage, investigate, and correlate security…
Sevii
CISO ReviewedAgentic AI platform positioning itself around autonomous threat elimination rather than alerting, using AI agents to investigate and…
Fenix24
Chattanooga-based ransomware recovery specialist that has restored operations after 500+ real-world incidents, including 30 Fortune 500 companies.
Artemis Security
A New York AI-native SOC platform correlating identity, network and cloud signals into attack narratives, already counting Wix…