Security Information Management
If AI Becomes the User, What Happens to the SIEM?
RSAC 2026 made one thing very clear to me: the market is moving fast, but it is still deeply confused. The big announcements from Google, Splunk, and Databricks all point in the ...
SIEM Is Not Dead. It Just Stopped Moving Fast Enough.
I recently joined Tim Peacock and Anton Chuvakin on the Google Cloud Security Podcast to talk about SIEM, AI SOC, pricing, federated architecture, detection engineering, and why network telemetry is quietly becoming ...
The SIEM Maturity Framework Workbook (v1.0): A Practical Scoring Tool for Security Analytics Platforms
Over the last few weeks I published a post on the architectural and operational gaps that created the new wave of SIEM and AI SOC vendors. A bunch of people asked the ...
The Gaps That Created the New Wave of SIEM and AI SOC Vendors
I have been talking to a few AI SOC and new SIEM market entrants over the past few weeks. I have voiced some opinions in previous posts but have now started to ...
How AI Impacts the Cyber Market and The Future of SIEM
Security has always moved in waves. Not because we suddenly get smarter, but because we learn from past mistakes, identify gaps, hit limits, need to protect new technologies, and then go and ...
Why Venture Capital Is Betting Against Traditional SIEMs
And why most of the arguments do not hold up under scrutiny Over the past 18 to 24 months, venture capital has flowed into a fresh wave of SIEM challengers including Vega ...
The Trojan Horse We Let Into the SIEM Kingdom
Every few years in security, a category shows up that makes you think: “This market should have never existed.” The “security data pipeline / data fabric / routing” universe is exactly that ...
How To Drive Value with Security Data – The Full Talk
Last week I keynoted LogPoint’s customer conference with a talk about how to extract value from security data. Pretty much every company out there has tried to somehow leverage their log data ...
A Logging History Lesson – From syslogd(8) to XDR
The log management and security information management (SIEM) space have gone through a number of stages to arrive where they are today. I started mapping the space in the 1980’s when syslog ...
How To Drive Value with Security Data
We have been collecting data to drive security insights for over two decades. We call these tools log management solutions, SIMs (security information management), and XDRs (extended detection and response) platforms. Some ...
