Exabeam

What Exabeam does

Exabeam is a private US-headquartered cybersecurity vendor specializing in security operations, founded in 2013 and currently owned by private equity firm Ponte Partners following its October 2025 acquisition. The company built its brand on pioneering machine-learning-based user and entity behavior analytics (UEBA) for insider threat and credential misuse detection, and has since expanded into a cloud-native Security Operations Platform delivered primarily on Google Cloud. Its flagship New-Scale Fusion combines New-Scale SIEM, New-Scale Analytics (UEBA plus the first-to-market Agent Behavior Analytics capability), Exabeam Nova (a team of six AI agents built on Google Gemini), Outcomes Navigator, and SOAR/Automation Management. The July 2024 merger with Thoma Bravo-backed LogRhythm added a self-hosted SIEM product and complementary on-premises customer base, with LogRhythm SIEM now sold exclusively under the Exabeam brand as an on-premises offering. Proprietary differentiators include a patented Session Data Model with open-ended correlation windows, patented detection grouping, and a content library of 7,000+ prebuilt parsers and 1,100+ correlation rules.

Exabeam serves enterprise security operations teams, MSSPs, and a broad set of verticals including financial services, government and defense, healthcare, higher education, and manufacturing. Customer logos include NASA, U.S. Air Force, MUFG, BRAC Bank, KIA, AsahiKasei, Under Armour, Dayforce, SiriusXM, and Resorts World Las Vegas, among 35+ named accounts. The company monetizes primarily through annual cloud-native subscriptions (New-Scale SIEM, New-Scale Analytics, New-Scale Fusion) on Google Cloud with usage-based EPS/ingestion pricing, complemented by LogRhythm SIEM (subscription or perpetual license under a True Unlimited Data Platform), professional services, training (including a Tuwaiq Academy partnership in Saudi Arabia), and a new MSSP pooled/federated licensing framework. Distribution combines direct enterprise field sales, the global APEX Partner Program, Google Cloud Marketplace, and regional channel partnerships in MENA, East Asia, and Africa. Exabeam has been recognized as a Leader in the Gartner Magic Quadrant for SIEM for six consecutive years through 2025, holds ISO 27001, SOC 2 Type II, IRAP Protected, and Privacy Shield certifications, and is led by CEO Pete Harteveld (appointed October 2025) with Steve Wilson as Chief AI and Product Officer.

Name

Exabeam

Legal name

Exabeam Inc.

Website

https://exabeam.com

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

501–1,000 employees

Short description

Exabeam is a US-based, PE-owned cybersecurity vendor that delivers a cloud-native security operations platform on Google Cloud, combining SIEM, UEBA, six AI agents (Exabeam Nova), and first-to-market Agent Behavior Analytics for AI agents, serving enterprise SOC teams, MSSPs, and government/regulated verticals globally.

Ownership category

akta.pro rank

Product category

Security Operations Platform (SIEM / Security Analytics)

NAICS

Computer Systems Design and Related Services (5415), Custom Computer Programming Services (541511), Security Systems Services (56162)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Access Security & Identity Threat Detection (ITDR, UEBA for Identity) (HDADAAAI)

akta.pro secondary industries

Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG), AI Observability, Monitoring & Evaluation Platforms (Drift, Quality, Safety) (HDAEANAF), Identity Threat Detection & Response (ITDR) (HDAEAJAH), Identity, Access & Secrets Management for AI Systems (IAM for agents/models) (HDAAAKAJ), Identity & Access Management (IAM) Managed Services (BPAEADAE)

Keywords

• Security information event management
• User entity behavior analytics
• Security orchestration automation response
• Cloud-native security operations
• Agent behavior analytics

Headquarters

HQ city

Foster City

HQ country

United States

HQ region

North America

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Cloud-native Subscription (New-Scale Fusion): Subscription-based cloud-native SIEM and behavioral analytics platform delivered on Google Cloud Platform, with flexible consumption-based elements tied to data ingestion and EPS volumes.
2. LogRhythm SIEM Licensing: Available as subscription (software as a subscription) or perpetual license, using the True Unlimited Data Platform model with no tiers or hidden fees.
3. LogRhythm Intelligence Add-on: Subscription add-on product to LogRhythm SIEM delivering AI/behavioral analytics via New-Scale Fusion in a hybrid deployment.
4. Professional Services and Training: Professional services, education and training programs including instructor-led sessions, certification curricula, and authorized training centers (e.g., Tuwaiq Academy in Saudi Arabia).
5. MSSP Pooled License Program: MSSP-specific commercial framework within APEX offering a single pooled license for high-volume multi-tenant environments with centralized management.

Pricing tiers

Go-to-market motion4 records

Distribution channels6 records

Marketing channels10 records

Core offering

Exabeam sells a cloud-native security operations platform (New-Scale Fusion) that combines a SIEM (New-Scale SIEM), user-and-entity behavior analytics (New-Scale Analytics), AI agents (Exabeam Nova), and automation for threat detection, investigation, and response. It also offers the self-hosted LogRhythm SIEM (acquired in 2024), the LogRhythm Intelligence UEBA add-on, the NetMon network sensor, and the open-source Praxen tool for AI agent behavior verification, sold primarily to enterprise security operations teams and delivered via subscription, perpetual license, or professional services.

Product overview

Exabeam offers a platform-plus-modules security operations architecture rather than a single monolithic product. The flagship is the cloud-native New-Scale Fusion Security Operations Platform, which combines New-Scale SIEM (cloud-native log management, search, correlation, and Threat Center workbench) and New-Scale Analytics (UEBA, dynamic risk scoring, and Agent Behavior Analytics for AI agents) under a unified AI-driven experience. Layered on top of New-Scale Fusion is Exabeam Nova, a team of six AI agents (Investigation, Advisor, Search, Visualization, Analyst Assistant, Threat Scoring) built on Google Gemini within Google Cloud Platform, and Outcomes Navigator, which provides coverage benchmarking, AI Agent Security readiness, and detection engineering guidance. Customers can augment an existing SIEM (Splunk, Microsoft Sentinel, IBM QRadar) with New-Scale Analytics or replace it entirely. Following the July 2024 merger with LogRhythm (Thoma Bravo-backed), Exabeam also offers the self-hosted LogRhythm SIEM and the LogRhythm Intelligence UEBA add-on. Capabilities such as TDIR, UEBA, SOAR (Automation Management), Insider Threats, Compliance, and the new Agent Behavior Analytics (ABA) span both the cloud-native New-Scale and self-hosted LogRhythm deployments. NetMon provides network traffic visibility into either SIEM, and the company released Praxen as an open-source tool for AI agent behaviour verification.

Differentiator

Problem solved

Functional benefit

Brands

• New-Scale Fusion: Cloud-native security operations platform combining New-Scale SIEM and New-Scale Analytics with AI-driven TDIR workflows.
• New-Scale SIEM
• New-Scale Analytics
• Exabeam Nova
• Outcomes Navigator
• NetMon
• LogRhythm SIEM
• LogRhythm Intelligence
• Praxen

Products and services

• New-Scale Fusion Security Operations Platform Cloud-native Security Operations Platform that combines New-Scale SIEM and New-Scale Analytics, applying AI and automation to detect, investigate, and respond to threats faster for enterprise SOC teams. Built on Google Cloud Platform with ISO 27001, SOC 2 Type II, and IRAP Protected certifications.
• New-Scale SIEM Cloud-native SIEM built on New-Scale Fusion providing high-performance search across terabytes of data, fast ingestion (2M+ EPS), 7,000+ prebuilt parsers, correlation rule authoring, Threat Intelligence Service, Threat Center workbench, and Outcomes Navigator integration. Sold to enterprise security teams.
• New-Scale Analytics Machine-learned behavioral analytics and automation layer that augments an existing SIEM (Splunk, Microsoft Sentinel, IBM QRadar) or runs within New-Scale SIEM, providing UEBA for users, Agent Behavior Analytics for AI agents, dynamic baselines, and Exabeam Nova agent support.
• Exabeam Nova AI agent framework built on Google Gemini within Google Cloud Platform comprising six integrated agents (Investigation, Advisor, Search, Visualization, Analyst Assistant, Threat Scoring) that automate triage, summarize cases, classify threats, recommend next steps, and support human-agent teaming for SOC analysts.
• Outcomes Navigator Industry-first solution within New-Scale Fusion for measuring and improving real security outcomes through coverage mapping to use cases, MITRE ATT&CK, and compliance frameworks; AI Agent Security readiness assessment; peer benchmarking; and detection engineering guidance powered by the Nova Advisor Agent.
• LogRhythm SIEM Self-hosted (on-premises or customer-managed cloud) SIEM offering with Machine Data Intelligence Fabric, 1,100+ out-of-the-box correlation rules mapped to MITRE ATT&CK and compliance mandates (PCI DSS, NIST CSF, NIST 800-53/171, CIS Controls, COBIT), embedded SOAR via SmartResponse, and optional LogRhythm Intelligence UEBA add-on. Available as subscription or perpetual license.
• LogRhythm Intelligence AI and behavioral analytics add-on to LogRhythm SIEM delivered through New-Scale Fusion. Applies Exabeam UEBA models to LogRhythm SIEM data to detect insider threats, credential misuse, privilege abuse, and identity-driven attacks, with Exabeam Nova summarization integrated into the analyst workflow.
• NetMon Network traffic monitoring product offering real-time visibility into New-Scale or LogRhythm SIEM deployments via True Application Identification across ~4,700+ apps, 10Gb/s inspection, Deep Packet Analytics (DPA), SmartCapture session capture, and PCAP-based forensics integration.
• Praxen Open-source tool released under Apache 2.0 license for verifying AI agent behavior before deployment, introducing Agent Behaviour Verification as a new security approach that examines whether an AI agent's configured role, permissions, and controls match its intended tasks.

Quantifiable outcome

• 5x SOC productivity through AI-driven TDIR
• +10 more outcomes

Named customers37 records

Segments8 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration18 records

AI capability12 records

Feature8 records

Partnerships

Twelve partnerships are on record, tiered major, flagship and minor.

• Tuwaiq AcademymajorImplementation/ SI/ Consulting Partner · 17 June 2026LogRhythm | Exabeam partnered with Tuwaiq Academy to deliver cybersecurity certification programs, training bootcamps, and professional development courses across Saudi Arabia, targeting over 40,000 students at nine major universities. Tuwaiq Academy designated as the first authorized LogRhythm | Exabeam training centre in the Middle East.
• Google CloudflagshipTechnology or Integration · 22 April 2026Strategic partnership integrating Exabeam Agent Behavior Analytics with Google Cloud's Agent Development Kit and Google Agent Gateway for multi-agent workflows. Exabeam also awarded Google Cloud Security Partner of the Year 2026 - Analytics & Operations.
• Al Moammar Information Systems Co. (MIS)majorChannel Partner/ Reseller/ Distributor · 1 December 2025Strategic partnership with Saudi Arabian systems integrator to launch Customer Innovation Center in Riyadh and jointly offer SIEM and security operations platform solutions to Saudi-based organizations. Aligned with Saudi Vision 2030 objectives.
• Virtual Infosec AfricaminorChannel Partner/ Reseller/ Distributor · 21 November 2025Virtual Infosec Africa announced a partnership with Exabeam to introduce AI-powered threat detection and modern SIEM capabilities to Ghanaian businesses via a cybersecurity event in Accra on 25 November 2025.
• Recorded FutureflagshipTechnology or Integration · 18 November 2025Strategic partnership to integrate Recorded Future's threat intelligence with Exabeam's platform for enhanced threat detection and response. Enables real-time threat intelligence enrichment, automation of response actions, and improved investigation efficiency.
• S2WmajorTechnology or Integration · 11 November 2025South Korean cybersecurity firm S2W announced a strategic partnership to integrate its proprietary threat intelligence technology into Exabeam's New-Scale Security Operations Platform. Marks S2W's first overseas corporate collaboration following its IPO.
• CriblmajorTechnology or Integration · 1 January 2025Strategic partnership to extend behavioral detections and insider risk capabilities via Cribl's data routing and observability pipeline technology.
• DataBahnmajorTechnology or Integration · 1 January 2025Strategic partnership to extend behavioral detections and insider risk capabilities via DataBahn's data management technology.
• LogRhythm (Thoma Bravo)flagshipStrategic or Co-development Partner · 18 July 2024Exabeam and Thoma Bravo-backed LogRhythm completed their merger on July 18, 2024, combining AI-driven security operations. The merged company retains the Exabeam name while incorporating LogRhythm's data ingestion capabilities. LogRhythm SIEM is now exclusively available as an on-premises solution under Exabeam.
• SplunkmajorTechnology or IntegrationExabeam's New-Scale Analytics integrates with Splunk and other SIEMs (Microsoft Sentinel, IBM QRadar) via prebuilt integrations, enabling behavioral analytics deployment on top of customers' existing Splunk investment.
• Microsoft SentinelmajorTechnology or IntegrationExabeam integrates with Microsoft Sentinel via prebuilt integrations and supports federated search across Sentinel deployments. Customers can keep their Sentinel SIEM and add Exabeam behavioral analytics.
• IBM QRadarmajorTechnology or IntegrationExabeam integrates with IBM QRadar via prebuilt integrations and supports data ingestion from QRadar, enabling behavioral analytics augmentation for QRadar deployments.

Scale indicators15 records

Recent moves8 records

Expansion highlights8 records

Direct peers

• Sumo Logic: Sumo Logic is a cloud-native log management and security analytics platform competing with Exabeam's New-Scale SIEM on ingestion scale, federated search, and SIEM-as-a-service for cloud-forward enterprises.
• Splunk: Splunk (now owned by Cisco) is the leading enterprise SIEM and observability platform and the most direct competitor to Exabeam's New-Scale SIEM. The two compete head-to-head on cloud-native log management, behavioral analytics, and SOC workflows; Exabeam's New-Scale Analytics even integrates with Splunk as an augmentation layer.
• Microsoft Sentinel: Microsoft Sentinel is a cloud-native SIEM built on Azure that competes directly with Exabeam's New-Scale SIEM. Sentinel benefits from deep integration with the Microsoft security ecosystem and aggressive bundling, putting sustained pricing pressure on cloud-native SIEM evaluations.
• IBM QRadar: IBM QRadar is a longstanding enterprise SIEM that overlaps directly with Exabeam's self-hosted LogRhythm SIEM offering and competes in regulated, on-premises deployments. Exabeam's New-Scale Analytics can be deployed as an augmentation layer on top of QRadar, making them both partners and competitors.
• Securonix: Securonix is a cloud-native SIEM built around UEBA that competes with Exabeam's New-Scale SIEM and New-Scale Analytics in enterprise SOC deployments. Both vendors pioneered ML-driven UEBA and target the same Fortune 500 and MSSP buyers.
• Rapid7: Rapid7 offers InsightIDR, a SIEM/XDR platform with behavioral analytics, that competes with Exabeam's TDIR and UEBA capabilities for mid-market and enterprise SOC buyers. Both target security teams seeking integrated detection, investigation, and response.
• Devo Technology: Devo Technology operates a cloud-native security analytics platform that directly competes with Exabeam's New-Scale SIEM, with overlapping emphasis on high-EPS ingestion, behavioral analytics, and SOC productivity.

Broad incumbents

• CrowdStrike: CrowdStrike's Falcon platform extends from endpoint detection into SIEM-adjacent log search and SOC workflows (Falcon LogScale, Falcon Next-Gen SIEM), making it a broader incumbent competing with Exabeam for SOC budget, particularly in endpoint-led accounts.
• Palo Alto Networks: Palo Alto Networks offers XSIAM, a SIEM/XDR platform that competes with Exabeam's New-Scale Fusion as part of a much broader security portfolio. XSIAM bundles data lake, EDR, and SOC automation, increasing competition for large enterprise platform consolidation deals.

Emerging players

• Arctic Wolf: Arctic Wolf is an MDR-first provider with its own SIEM/data lake that competes with Exabeam in the mid-market and MSSP segment. It is comparable as a SOC-outsourced alternative to deploying Exabeam's New-Scale Fusion directly, particularly for buyers preferring managed outcomes over platform ownership.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/Exabeam
• LinkedInlinkedin.com/company/exabeam
• Xx.com/exabeam

Compliance11 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles18 records

Subsidiaries1 record

Funding overview

Funding rounds8 records

Investors16 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A2 records

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Exabeam