The buyers here are CISOs who already did what TechTarget has documented as a deliberate strategy: decoupling security telemetry from the SIEM to escape per-byte retention pricing, then discovering that spreading logs across data lakes, object storage and cold archives just relocated the pain to search. DataBahn, fresh off a $40 million Series B led by Insight Partners announced in July 2026 per PR Newswire, is selling the fix back to the same buyer it helped create — a pipeline vendor now layering a natural-language search and knowledge-graph product (branded Reef and Lumen) on top of the routing infrastructure it already sells into more than 600 integrations, claiming 40-to-70 percent telemetry-volume reduction along the way.
The competitive map is getting crowded from two directions. Databricks just announced Lakewatch, an agentic SIEM built on its lakehouse and Unity Catalog, arguing that the real fix is unifying security data with business data in one governed store rather than federating queries across many stores — a direct architectural rebuttal to DataBahn’s ‘search where it lives’ pitch. Meanwhile incumbent SIEM vendors like Splunk, per Wiz’s own framing of the category, are trying to own the same decoupled-storage, cloud-native positioning from the other side. DataBahn’s wager is that enterprises won’t want to migrate onto a new lakehouse or rebuild around one vendor’s schema, and will instead pay a pipeline company to sit above the mess they already have.
DataBahn is asking enterprises to trust a governed gateway and a proprietary knowledge graph to stay vendor-neutral — that’s a claim worth testing against contract terms, not press-release language.
Worth watching: whether ‘customer-owned keys’ and ‘any model’ independence survive contact with renewal pricing once Reef and MCP Hub become load-bearing for daily investigations, and whether Databricks’ lakehouse pitch or Splunk-style incumbents pull budget away from the federated-search middle ground DataBahn is staking out at Black Hat this week.
"Enterprises have spent the past decade moving security data from one system to another simply to ask questions of it," said Aditya Sundararam, chief product officer of DataBahn. "Federated Search and Orchestration changes that. Security teams and AI agents can now search data across every source, retrieve answers grounded in enterprise context, and turn those answers into completed investigations. This marks the shift from managing data pipelines to orchestrating intelligence, and it is exactly what DataBahn's agentic data control plane was built to enable."
