Cribl Launched Detect SIEM Platform

The new cybersecurity product aims to lower costs by charging based on infrastructure usage rather than data volume.

Updated on Sept. 29, 2026 in Cybersecurity

Isometric editorial illustration of orderly, multi-colored server racks with neat cabling, representing enterprise data infrastructure. — Cribl launched Detect, a new cybersecurity platform that charges based on infrastructure usage to help enterprises reduce data management costs. AI Illustration. Upload story photo >

Live Poll

Do you trust that new data-management software will actually lower your long-term business operating costs?

Cribl has released a new security information and event management (SIEM) product called Detect. The platform utilizes federated search technology to investigate data without requiring it to be moved or re-ingested.

Why it matters

The company developed Detect to reduce data security costs for enterprises by eliminating the need to pay for repeated data queries. By charging based on infrastructure rather than search volume, the tool seeks to solve traditional SIEM financial pain points.

Detect is priced at approximately $18,000 to $20,000 per TB per month based on underlying infrastructure. The product integrates intellectual property from the acquisitions of CardinalOps and Radiant Security.

The players

Cribl

Cribl is a data observability company that provides tools for data routing, security analytics, and management.

CardinalOps

CardinalOps is a data engineering vendor that specializes in security posture management and analytics.

Radiant Security

Radiant Security is an incident triage provider that utilizes AI to automate security operations center workflows.

The details

Cribl Detect functions by performing federated searches directly against data at its existing location. This approach allows security teams to conduct investigations and re-analyze information without incurring repeated ingestion or query fees.

Cribl acquired data engineering firm CardinalOps in July 2026.
The company acquired incident triage specialist Radiant Security in August 2026.
Cribl officially launched the Detect product in September 2026.

The Tech Race

The launch of Detect marks a direct challenge to the traditional ingestion-based SIEM billing model that has dominated the cybersecurity market for years. By moving away from per-query fees, Cribl is positioning itself to compete with established incumbents by prioritizing infrastructure efficiency over volume-based gatekeeping.

Security teams can expect a fundamental shift in how they budget for incident response and threat monitoring tasks. By removing search volume as a cost driver, organizations may gain more flexibility to conduct deep-dive investigations without fearing budget overruns from data ingestion fees.

The takeaway

The transition to infrastructure-based pricing reflects a growing industry preference for cost predictability in data-heavy cybersecurity operations. Organizations looking to optimize their SIEM spend should evaluate whether their current data volume justifies a switch to these alternative fee structures.