Tenzir

Moved from an open-source data engine to a full commercial security-data-pipeline platform launched at Black Hat USA 2023, and continues active open-source development, but on a small team's pace.

Directly targets a real, costly SOC problem — SIEM ingestion/storage costs — by letting teams curate and route telemetry before it's billed, which is operationally meaningful if adopted.

Funding is thin and inconsistently reported (roughly €3M seed from eCAPITAL/G+D Ventures is the only figure corroborated across two independent sources); no named enterprise customers were found in search, and the company has low visibility outside German/EU deep-tech coverage.

The "curate telemetry at the edge instead of ingest-everything" model is a genuine shift in SOC data architecture, but Tenzir is a small entrant into a category already being defined by larger, better-funded players (e.g., Cribl), not the one setting the pace.

No independent customer case studies, named deployments, or third-party test results were found; efficacy claims rest on the open-source project's existence and the vendor's own blog, not verified outcomes.

Security telemetry volume and SIEM cost pressure will keep growing as logging and AI-driven monitoring expand, so the underlying problem is durable, even though Tenzir's own position in that market is unproven.