What ONUM does

ONUM, founded in 2023 in Madrid, Spain, built a real-time telemetry pipeline management platform designed to process, filter, enrich, and route security and IT data at machine speed. The product employs a stateless, in-memory architecture and is marketed as delivering up to 5x more events per second than the nearest competitor, with claimed outcomes of 50% lower telemetry storage costs, 40% less ingestion overhead, and 70% faster incident response through upstream in-pipeline detection. Pre-acquisition, ONUM targeted enterprise Security Operations Centers dealing with alert fatigue, fragmented telemetry, and legacy batch-processing bottlenecks, selling horizontally into large organizations modernizing their security data layers.

The company raised over $40 million in disclosed venture funding, including a ~$12.5M seed round in mid-2023 (Insight Partners, Kibo Ventures) and a ~$27.7M Series A in April 2024 led by Dawn Capital. In August 2025, CrowdStrike announced its intent to acquire ONUM for $290 million, completing the deal in September 2025 and rebranding the product as Falcon Onum. Post-acquisition, Falcon Onum serves as the data routing and pipeline layer for CrowdStrike Falcon Next-Gen SIEM, distributed through CrowdStrike's global enterprise sales force, with channel reach extended via managed security partners such as Vijilan Security (Saudi Arabia, India, UAE) and Ernst & Young (160-country managed SOC deployments). Pricing is no longer publicly disclosed at the ONUM level and is integrated into CrowdStrike's Falcon platform offerings.

Name

ONUM

Legal name

Onum

Website

https://onum.com

Company type

Private

Founded year

2023

Operating status

Acquired

Headcount range

11–50 employees

Short description

ONUM built a real-time telemetry pipeline platform for enterprise Security Operations Centers, filtering, enriching, and routing security data at machine speed. Founded in Madrid in 2023, the company was acquired by CrowdStrike in September 2025 for $290 million and rebranded as Falcon Onum.

Ownership category

akta.pro rank

Headquarters

HQ city

Madrid

HQ country

Spain

HQ region

Europe

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Distribution channels2 records

Marketing channels3 records

Core offering

ONUM (now Falcon Onum) sells a real-time telemetry pipeline management platform that collects, structures, enriches, filters, and routes security and IT data in motion. It processes up to 5x more events per second than competitors and is deployed either standalone to modernize telemetry pipelines or as the data routing layer inside CrowdStrike Falcon Next-Gen SIEM. The platform targets enterprise Security Operations Centers (SOCs) seeking to reduce data noise, lower storage costs, and accelerate incident response.

Product overview

ONUM (now branded as Falcon Onum within the CrowdStrike ecosystem) was a Spanish real-time data pipeline company acquired by CrowdStrike in September 2025 for $290 million. Originally founded in 2023, ONUM had raised over $40 million from investors including Dawn Capital, Kibo Ventures, and Insight Partners. The product operates as a high-performance, real-time data pipeline with stateless, in-memory architecture offering processing speeds up to 5x faster than competitors. Falcon Onum can be deployed independently to modernize telemetry pipelines or integrated with Falcon Next-Gen SIEM as the data control and routing layer, enabling autonomous in-pipeline threat detection, intelligent data routing, and PII masking.

Differentiator

Problem solved

Functional benefit

Products and services

• Falcon Onum Falcon Onum is a real-time telemetry pipeline management platform that collects, structures, enriches, filters, masks, and routes security and IT data in motion to multiple destinations such as SIEMs, data lakes, SOAR, and analytics tools. It is targeted at enterprise Security Operations Centers and large organizations looking to modernize telemetry pipelines, reduce storage costs by up to 50%, accelerate incident response by 70%, and enable in-pipeline threat detection via a drag-and-drop pipeline control UI.

Quantifiable outcome

• 70% faster incident response with in-pipeline detection
• +4 more outcomes

Segments2 records

Ideal customer profiles2 records

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability3 records

Feature5 records

Partnerships

Two partnerships are on record, tiered core and minor.

• Ernst & Young (EY)coreImplementation/ SI/ Consulting Partner · 1 November 2025EY US selected CrowdStrike Falcon Next-Gen SIEM to enhance its cybersecurity managed services across 160 countries. Leverages Falcon Next-Gen SIEM, Onum, and Charlotte AI to modernize security operations and improve threat detection with up to 150% faster search capabilities.
• Vijilan SecurityminorChannel Partner/ Reseller/ DistributorVijilan Security expanded its professional and managed services for CrowdStrike Falcon Next-Gen SIEM, integrating Onum as the data ingestion and pipeline layer. Provides architecture design, detection engineering, log source onboarding, and 24x7 managed operations for organizations in Saudi Arabia, India, and UAE.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Cribl: Cribl is the closest direct competitor to Onum, offering Cribl Stream — an observability pipeline that routes, filters, enriches, and reshapes telemetry for security and operations teams. Both compete on telemetry routing for SOC/observability use cases with overlapping buyer personas.
• Sumo Logic: Sumo Logic is a cloud-native log management and SIEM platform serving enterprise security operations. It overlaps with Onum's positioning as a real-time telemetry ingestion and analysis layer for SOCs.
• Mezmo: Mezmo (formerly LogDNA) is a centralized log management and observability pipeline platform that routes, parses, enriches, and archives telemetry. It is a direct niche competitor to Onum's drag-and-drop pipeline control for SOC data flows.
• LogRhythm: LogRhythm is a dedicated SIEM platform for security operations centers with threat detection, log management, and analytics. It competes with Falcon Next-Gen SIEM (and Onum's pipeline layer) for enterprise SOC modernization budgets.
• Exabeam: Exabeam is an AI-driven security analytics and SIEM platform with log management, behavior analytics, and threat detection. It is a direct competitor to CrowdStrike's SIEM strategy that Onum's pipeline layer is intended to power.

Broad incumbents

• Splunk: Splunk (acquired by Cisco for $28B) is the dominant enterprise SIEM and log analytics platform. CrowdStrike positions Falcon Next-Gen SIEM (with Onum as the data layer) directly against Splunk, making it the primary displacement target and broad incumbent peer.
• Datadog: Datadog is a leading observability and monitoring platform with log management, security, and pipeline capabilities. As enterprises consolidate observability and security telemetry spend, Datadog competes for the same budget as Falcon Next-Gen SIEM + Onum.
• Elastic: Elastic offers the Elastic Stack (Elasticsearch, Logstash, Kibana) for search-driven log analytics, SIEM, and observability. Elastic competes for security telemetry pipeline spend and is a credible alternative to Onum's routing/enrichment layer in enterprise SOC architectures.
• Dynatrace: Dynatrace provides observability, application performance monitoring, and log analytics with a focus on AI-driven root-cause analysis. Its log management and pipeline capabilities compete for the same telemetry-routing and SOC analytics budgets as Onum.
• Grafana Labs: Grafana Labs develops the LGTM stack (Loki for logs, Grafana for visualization, Tempo for traces, Mimir for metrics), offering an open-source-based alternative to commercial SIEM/observability pipelines that competes for SOC telemetry spending.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/onuminc

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds3 records

Investors4 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ONUM