The telemetry data platform developer, which held its CriblCon 26 event this week, also debuted StreamAI, an AI gateway that the company says helps organizations gain better control over AI workflows.
Cribl continues to build on the core functionality of its telemetry data software, unveiling new capabilities this week that boosts the platform’s functionality in SIEM security and AI workload processing.
The new Cribl Detect and StreamAI offerings debuted at this week’s CriblCon 26 event in Chicago.
Cribl Detect is the company’s latest expansion into the cybersecurity arena. In July the company acquired CardinalOps and its agentic detection software, moving Cribl deeper into the security operations space. And in August Cribl acquired technology assets from Radiant Security’s AI-native security operations center product.
[Related: 20 Cool New AI And Security Products At Black Hat 2026]
Cribl Detect, which incorporates threat detection technology from the CardinalOps acquisition, provides what the company describes as a complete SIEM system at 50 percent of the cost of other SIEM products, largely due to its faster data ingestion capabilities and reduced cloud costs, according to the company.
Security teams are under pressure to detect and respond to cybersecurity incidents more quickly as cyber criminals leverage AI to increase the speed and sophistication of their attacks.
By collecting and processing telemetry data more quickly, Cribl Detect provides a faster, more effective way to detect, investigate and respond to threats, according to the company. With other SIEM products, threat data has to traverse multiple systems before arriving in the hands of security teams, said Nicole Beckwith, Cribl senior director, security engineering and operations, in an interview with CRN.
“And so you’re already behind the curve when you’re looking at mean time to detect and mean time to respond,” she said with how other SIEM prooducts operate. “Detect actually makes it faster to get [information] into the analyst’s hands when there is an alert they need to look at. Think faster response. And not only faster response to traditional attacks, but faster response to AI-generated attacks.”
Cribl Detect benefits from the capabilities of the AI-powered Cribl platform with its built-in inference and agentic runtime capabilities that go beyond static, rules-based detection technologies, Beckwith said. Detect also taps into the expanded detection security capabilities built into the AI Observability tool Cribl launched in August.
StreamAI is an enterprise AI gateway with a model router built into the Cribl platform. Stream AI routes AI prompts and workloads “to the right model at the right price” while also providing improved visibility and control over AI operations.
The core Cribl platform “gives you choice, control and flexibility over your data,” said Nick Heudecker, Cribl vice president of market strategy and corporate development, in the interview with CRN. “Now, Stream AI extends that story to choice, control and flexibility over your AI, whether it’s model use, token consumption [or] concerns about sensitive data leaking out of your environment. We’re very adept at handling telemetry data.”
Heudecker said StreamAI is complementary to other Cribl tools, including AI Observability and AI Infrastructure Observability. “Stream AI is one component in our overall AI observability story.”
The Cribl executives said the latest additions to the Cribl portfolio create opportunities for the company’s channel partners to recruit new customers to the vendor’s platform and sell the new, expanded capabilities to existing customers.
While Cribl has traditionally targeted IT operations and security buyers, the latest additions to its product lineup help build on that, Heudecker said.
“This can open up new opportunities for channel partners to sell to different [management role] personas or to expand their footprint within [customer] accounts,” he said. “It is a very comprehensive story.”
