Telemetry pipeline to route, reduce and enrich logs and metrics
- Starting at
- Free plan available
- Vendor size
- —
- Customers
- —
Cribl
Deloitte allianceData engine company for IT and security telemetry whose products route, reduce and store logs, metrics and traces.
- Headquarters
- San Francisco, CA, US
- Founded
- 2018
- Employees
- —
- Size
- 1,001–5,000
- Stock exchange
- Private
- Revenue (USD)
- —
Deloitte alliance listings:
Cribl
Company profile
Cribl's Stream product sits between log, metric and trace sources and their destinations, letting teams filter, reshape, route and reduce telemetry before it reaches SIEM or observability tools. It also offers Edge collection agents, Search for querying data in place, and Lake for low-cost retention. Buyers are typically security operations and IT operations teams trying to control SIEM licensing and storage costs while switching or combining tools.
- Ownership
- Private
- Employees
- 1,001–5,000
Industries served
Banking & capital markets
Government & public sector
Technology, media & telecom
Healthcare
Cross-industry
Key offerings
Cribl StreamCribl EdgeCribl SearchCribl Lake
Typical use cases
- Cut SIEM ingest volume and licensing costs
- Route security logs to multiple analytics tools
- Archive telemetry cheaply in object storage for replay
Strengths
- Vendor-neutral routing reduces lock-in to any single SIEM or observability tool
- Data reduction can materially lower downstream licensing and storage spend
- Strong adoption among large security operations teams
Considerations
- Adds another layer to operate in the data pipeline
- Value depends on scale; smaller log volumes see less savings
- Search and Lake products are newer than the core Stream offering
Typical Deloitte services
- Security data pipeline design and SIEM migration
- Observability tooling rationalization and cost optimization
- Managed detection and response data onboarding
Editorial profile based on public information.