Accelerating the replacement of existing SIEM with Security Lakehouse-based Agentic SOC workflow automation
Amid the intensification of AI-based cyber threats, Databricks, a data and AI company, announced plans to acquire Panther, an AI SOC (Security Operations Center) platform company. This acquisition aims to strengthen the 'Security Lakehouse' vision of transitioning the existing SIEM (Security Information and Event Management) system to an AI agent-centric model.
Databricks officially announced on the 30th that it is pursuing the acquisition of Panther. This acquisition marks the third acquisition in the security sector, following Antimatter and SiftD.ai, and proceeds subject to the fulfillment of standard closing conditions, such as regulatory approval.
Panther has been providing AI-native environment-based security operations solutions to major enterprise security teams, including Anthropic.
Today, attackers utilize AI agents to search for vulnerabilities across cloud, SaaS, and AI systems in real time.
On the other hand, it has been pointed out that existing SIEM systems struggle to effectively respond to these threats due to high operating costs, limited data utilization, and a manual-centric structure.
Databricks stated that Panther complements the limitations of existing SIEMs by integrating all data sources through swarms of AI agents and automating threat detection and security alert investigations.
Databricks co-founder and CEO Ali Ghodsi stated, “Existing SIEMs were not designed for the AI era,” adding, “With Panther, the ability to analyze all security data and automate SOC workflows will be further expanded.”
Through this acquisition, Databricks plans to expand its security lakehouse vision in three areas.
The key elements are: implementing agentic workflows optimized for SOCs; providing over 100 pre-built data integration functions, including cloud infrastructure, identity providers (IdPs), endpoints, and SaaS applications; and securing expertise in open source and cloud-native security operations.
'Lakewatch,' unveiled by Databricks earlier this year, is a security and IThe company explained that it integrates T·business data into a single governance-based lakehouse to support agentic detection and response, and provides total cost of ownership (TCO) reduction benefits.
It is reported that LakeWatch's SOC workflow automation capabilities will be further strengthened through the acquisition of Panther.