Vega
Vega builds an AI-native federated security analytics platform, the Security Analytics Mesh, that runs queries, detections, and AI triage in place across enterprise cloud storage, data lakes, and SIEMs without data migration. It sells multi-year enterprise contracts to Fortune 200 customers in financial services, healthcare, and other regulated verticals.
- Company typePrivate
- Founded2024
- HeadquartersTel Aviv-yafo, Israel
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What Vega does
Vega builds an AI-native federated security analytics platform called the Security Analytics Mesh (SAM), positioned as an alternative to traditional centralized SIEMs for large enterprise security operations. The platform connects to data wherever it resides across cloud object storage (AWS S3, Azure Blob, Google Cloud Storage), data lakes (Snowflake, Databricks, Amazon Security Lake, Azure Data Explorer), legacy SIEMs (Splunk, Elasticsearch), and identity, asset, and cloud security point products (Okta, Axonius, Wiz, Cyera), running queries, detections, and AI-driven triage in place without data migration or ingestion. Technical differentiators include in-place reverse indexing inside customer cloud storage, OCSF-normalized federated query execution, permissions-preserving RBAC propagation, an AI-driven five-stage data onboarding pipeline that takes connectors from raw ingestion to detection-ready in under an hour, and an exposed MCP interface for AI agents. Vega monetizes through custom-quote, multi-year enterprise SaaS contracts priced by data volume and scope, sold via a direct enterprise field-sales motion with US-based Regional Sales Managers and supplemented by a channel program that includes a GuidePoint Security reseller partnership and a Truesec-led MDR delivery layer across the Nordics. The customer base is anchored in Fortune 200 enterprises, with named reference customers including UnitedHealth Group, a Fortune 50 financial services company, a global pharmaceutical company with 75,000 employees, a global retail technology company, a Fortune 100 diversified company, and a publicly traded communications company. Vega is dual-headquartered in Tel Aviv and New York, was founded in 2024 by Shay Sandler and Eli Rozen (both Unit 8200 veterans and former Intel Granulate executives), emerged from stealth in September 2025 with $65 million in seed/Series A funding, and closed a $120 million Series B in February 2026 at a ~$700 million valuation, bringing total capital raised to $185 million and headcount to over 100 employees.
Vega firmographics
Firmographics- Name
- Vega
- Legal name
- Vega Cyber Solutions Ltd. / Vega Security, Inc.
- Website
- https://vega.io
- Company type
- Private
- Founded year
- 2024
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Vega builds an AI-native federated security analytics platform, the Security Analytics Mesh, that runs queries, detections, and AI triage in place across enterprise cloud storage, data lakes, and SIEMs without data migration. It sells multi-year enterprise contracts to Fortune 200 customers in financial services, healthcare, and other regulated verticals.
- Ownership category
- akta.pro rank
Vega industry classification
Industry- Product category
- Security Analytics Platform
- NAICS
- Software Publishers (513210)
- SIC
- Services-Computer Programming Services (7371)
- akta.pro primary industry
- Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG)
Keywords
Where Vega is headquartered
LocationHeadquarters
- HQ city
- Tel Aviv-yafo
- HQ country
- Israel
- HQ region
- Middle East
Markets served
Vega business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations
Revenue model
- Enterprise SaaS subscriptions (multi-year security analytics contracts): Recurring multi-million-dollar security analytics contracts signed with Fortune 200 customers including global banks and large healthcare organizations; revenue is contract-based enterprise SaaS with multi-year terms inferred from the contract size and Fortune 200 customer base.
- Channel partner–driven enterprise sales: Resale and co-sell motion through partners such as GuidePoint Security and Truesec (the latter wrapping managed detection and response services around the platform), adding a partner-sourced revenue stream on top of direct sales.
- Managed services via MDR partner delivery: Truesec builds assessment, implementation, and fully managed 24/7 SOC services around the Vega platform, suggesting a managed services / partner-delivered revenue layer in addition to direct licensing.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Multi-year contract | Custom quote-based enterprise pricing, contacted via 'Get a demo' |
Go-to-market motion1 record
Distribution channels4 records
Marketing channels8 records
Vega product offering
Product offeringCore offering
Vega sells the Security Analytics Mesh (SAM), an AI-native federated security analytics platform that connects to customer data wherever it lives (SIEMs, data lakes, cloud object storage, and point products) and runs queries, detections, and AI triage in place without data migration or ingestion. The platform is sold as multi-year enterprise SaaS subscriptions to Fortune 200 customers including global banks, large healthcare organizations, communications, retail, and pharmaceutical enterprises, with on top the Vega Threat Hub threat intelligence portal.
Product overview
Vega's offering is a single unified platform — the Vega Security Analytics Mesh (SAM), often marketed as "The Operating System for Agentic SecOps" — composed of a core federated analytics layer and a set of capability modules/solutions that are sold and deployed together: AI-Native Federated Analytics, AI-Powered Detection, Agentic Triage (AI SOC), Cost Savings, and IR Readiness. On top of this core, Vega also offers the Vega Threat Hub threat-intelligence portal (with AI-generated KQL detections) and the Vega Labs research property; these are add-ons that feed the platform with curated detections and threat intelligence. The platform sits across customer SIEMs, data lakes, cloud object storage, and point products via pre-built connectors (AWS S3, Azure Blob, GCS, Databricks, Elasticsearch, Okta, Axonius, Wiz, Cyera, Splunk, etc.) so analytics, detection engineering, and agentic triage all run in place against the customer's existing data without migration.
Differentiator
Problem solved
Functional benefit
Brands
- SAM (Security Analytics Mesh): The company's flagship AI-native federated security analytics platform / Operating System for Agentic SecOps, including Assess, Search, Detect, and Triage modules.
- Threat Hub
- Vega Threat Intelligence (threats.vega.io)
Products and services
- Vega Security Analytics Mesh (SAM) AI-native federated security analytics platform that connects to enterprise data wherever it lives (SIEMs, data lakes, cloud object storage, point products) and runs queries, AI-powered detection engineering, and agentic triage in place without data migration or ingestion. Sold as multi-year enterprise SaaS subscriptions to Fortune 200 customers including global banks, healthcare organizations, communications, retail, and pharmaceutical enterprises.
- Vega Threat Hub Threat intelligence portal that centralizes feeds from multiple cybersecurity sources (including Kaspersky and Check Point) and uses AI to generate personalized, implementation-ready KQL detection queries from attack reports. Acts as both a stand-alone public utility and a feeder of curated detections into the SAM platform.
Companies that use Vega
Customer profileNamed customers6 records
Segments6 records
Ideal customer profiles4 records
Vega technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration15 records
AI capability12 records
Feature12 records
Vega partnerships and signals
Strategic signalPartnerships
15 partnerships are on record, tiered core, minor and flagship.
- TrueseccoreTruesec and Vega announced a partnership to deliver managed detection and response (MDR) services across the Nordics. The partnership combines Truesec's incident response and MDR operations with Vega's AI-native Security Analytics Mesh platform. Truesec will build assessment, implementation, and fully managed 24/7 SOC services around the platform, addressing the operational challenge of scattered data and attackers moving faster than SOC teams can respond.
- NomaminorCo-hosted happy hour with Vega at the Mercedes-Benz Experience during AWS Summit New York 2026 (June 17, 6–9 PM), bringing together security peers for an evening event during the conference.
- ImperminorCo-hosted cocktail reception at Lookout 18 Cocktail Lounge in National Harbor during the Gartner Security & Risk Management Summit 2026.
- Daylight SecurityminorCo-hosted cocktail reception at Lookout 18 Cocktail Lounge in National Harbor during the Gartner Security & Risk Management Summit 2026.
- Act SecurityminorCo-hosted cocktail reception at Lookout 18 Cocktail Lounge in National Harbor during the Gartner Security & Risk Management Summit 2026.
- CyeracoreTechnology integration that brings Cyera's data sensitivity and identity context into every Vega detection, query, and investigation. Vega continuously pulls Cyera datastores (sensitivity, classification, ownership) and identities (attributes, trust level, data access) as queryable data sources via Vega's federated analytics layer, enabling risk-aware detections and prioritized triage without data duplication.
- OktacoreIdentity context integration: connecting Okta makes identities queryable in Vega's federated KQL layer, enabling use cases such as detecting suspicious MFA factor changes for executives and identifying active Okta admins via Dynamic Lookup Tables.
- AxoniuscoreAsset context integration: connecting Axonius makes devices queryable in Vega's federated search, providing device function, ownership, and sensitivity context for AI investigations.
- WizcoreCloud security context integration: connecting Wiz makes cloud resources queryable in Vega's federated search, providing cloud asset and posture context alongside telemetry.
- DatabrickscoreListed connector integration in Vega's Data Lakes & Analytics connector library (alongside Amazon Security Lake, AWS S3, Azure Blob Storage, Azure Data Explorer, Elasticsearch), enabling federated analytics over Databricks-resident data.
- Amazon Web Services (AWS S3)flagshipAWS S3 is a primary integration target — Vega runs AI-native SecOps directly on S3 (Amazon Security Lake, AWS S3) without re-ingestion, and Vega is a featured exhibitor at AWS Summit New York 2026 (Booth 323). Vega highlights S3 as the 'detection backbone' for sunsetting legacy SIEM on AWS.
- Azure Blob StoragecoreListed connector integration in Vega's Data Lakes & Analytics connector library; Vega builds in-place indexes inside Azure Blob Storage to enable federated multi-cloud analytics without cross-cloud data movement.
- SnowflakecoreSnowflake is featured in Vega's technology-platform logos grid on the homepage, indicating a connector/data-lake integration enabling federated querying over Snowflake-resident data without data movement.
- Google CloudcoreGoogle Cloud is featured in Vega's technology-platform logos grid (alongside Snowflake, Databricks, AWS S3); Vega builds in-place indexes inside Google Cloud Storage (GCS) to enable federated multi-cloud analytics.
- GuidePoint SecurityflagshipReseller partnership announced April 17, 2026, offering GuidePoint Security customers access to Vega's AI-native security analytics platform to simplify detection across distributed environments by analyzing data in place. GuidePoint Security is a leading cybersecurity solution provider; the partnership includes co-hosted events (e.g., Gartner SRS happy hour).
Scale indicators9 records
Recent moves8 records
Expansion highlights6 records
Vega competitors and assessment
Company assessmentDirect peers
- Panther Labs: Cloud-native SIEM built on a security-data lake with detection-as-code. Most directly comparable to Vega as a modern, AI-aware alternative to traditional SIEMs targeting large enterprise SOCs.
- Hunters: AI-driven SOC platform that ingests and correlates telemetry from across cloud, identity, and EDR sources to deliver autonomous detection and triage — competing head-on with Vega's Agentic Triage positioning.
- Cribl: Observability pipeline vendor whose Stream/Edge products route, filter, and route security and log telemetry to SIEMs and data lakes, directly addressing the 'data movement / SIEM cost' pain point Vega attacks with in-place analytics.
Emerging players
- Anvilogic: Detection engineering and SOC optimization platform that sits on top of existing SIEMs and data lakes, with comparable AI-assisted detection authoring and MITRE coverage to Vega's detection module.
- Abstract Security: Early-stage SIEM alternative focused on data-pipeline-driven, AI-assisted security analytics — a recent entrant in the same post-SIEM category Vega has staked out.
Broad incumbents
- Exabeam: Established AI-driven security operations platform with SIEM, UEBA, and SOC automation — a broad incumbent that competes for the same Fortune 200 SOC modernization budget Vega targets.
- Devo Technology: Cloud-native SIEM and security analytics vendor serving large enterprise SOCs, with overlapping value proposition on cost-efficient analytics across high-volume telemetry.
- Splunk (Cisco): Dominant legacy SIEM incumbent and Vega's most-referenced 'federate alongside' integration target; competes for the same SIEM-modernization dollars, now accelerated by Cisco's distribution.
- Microsoft Sentinel: Hyperscaler-native cloud SIEM bundled into the Microsoft security stack; the principal 'platform threat' Vega must differentiate against in the enterprise.
- Sumo Logic: Cloud-native log management and security analytics platform targeting similar enterprise SOCs with continuous-intelligence style analytics, now under Francisco Partners ownership.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Vega social profiles
Digital presenceVega compliance and trust
Trust signalCompliance3 records
Vega financial estimates
Financial estimateRevenue estimate
Valuation estimate
Vega leadership team
Management profileNumber of profiles
Profiles10 records
Vega subsidiaries and ownership
Company hierarchySubsidiaries1 record
Vega funding detail
Funding detailFunding overview
Funding rounds4 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Vega M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Vega
What does Vega do?
Vega sells the Security Analytics Mesh (SAM), an AI-native federated security analytics platform that connects to customer data wherever it lives (SIEMs, data lakes, cloud object storage, and point products) and runs queries, detections, and AI triage in place without data migration or ingestion. The platform is sold as multi-year enterprise SaaS subscriptions to Fortune 200 customers including global banks, large healthcare organizations, communications, retail, and pharmaceutical enterprises, with on top the Vega Threat Hub threat intelligence portal.
Is Vega a public or private company?
Vega is a private company. It is classified as venture growth investor backed and is currently operating.
When was Vega founded?
Vega was founded in 2024. It employs 51 to 100 people.
Where is Vega based?
Vega is headquartered in Tel Aviv-yafo, Israel, in the Middle East region.
How does Vega make money?
Three revenue lines are on record. Enterprise SaaS subscriptions (multi-year security analytics contracts) is the primary driver. The others are channel partner–driven enterprise sales and managed services via MDR partner delivery.
Who are Vega's main competitors?
Direct peers on record are Panther Labs, Hunters and Cribl. Emerging players are Anvilogic and Abstract Security. Broad incumbents are Exabeam, Devo Technology, Splunk (Cisco), Microsoft Sentinel and Sumo Logic.
Does Vega have an API?
Yes. Vega exposes Vega's MCP (Model Context Protocol) for AI agents and supports natural language and KQL-based federated queries across all connected data sources. Developers and AI agents can use MCP to query, hunt, and investigate security data in place. No formal REST/GraphQL public API documentation was found; access is via MCP and the federated query interface.
What industry is Vega in?
Vega's product category is Security Analytics Platform. Its primary akta.pro industry code is HDAEANAG, Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII). Its NAICS code is 513210 and its SIC code is 7371.