Monad
Monad is a security data pipeline platform that ingests, normalizes, filters, enriches, and routes security telemetry from 300+ tools to SIEMs and data warehouses. It serves enterprise security and DevOps teams, including customers such as Robinhood, Upstart, and Vertiv, via a free-tier PLG model and volume-based enterprise contracts.
- Company typePrivate
- Founded2020
- HeadquartersSan Francisco, United States
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What Monad does
Monad is a security data pipeline company that operates a managed ETL platform for ingesting, normalizing, filtering, enriching, and routing security telemetry between security tools and downstream destinations such as SIEMs, data lakes, and data warehouses. The platform uses a directed acyclic graph (DAG) architecture connecting inputs (e.g., AWS CloudTrail, CrowdStrike, Wiz, Okta, Snyk) through transforms and enrichments to outputs (Splunk, Snowflake, Databricks, Elasticsearch, Kafka, and others), with 300+ pre-built connectors eliminating custom parser development. Its Monad Object Model (MoM) unifies disparate security data into a common schema, and OCSF Templates support alignment with the Open Cybersecurity Schema Framework standard. In-flight filtering can strip up to 70% of low-value data before expensive SIEM ingestion.
The company was founded in May 2020 in San Francisco, emerged from stealth in August 2021 with a $17M Series A led by Index Ventures (participation from Sequoia Capital), and acquired Tarsal in July 2025 to strengthen pipeline capabilities. Customers include Robinhood, Upstart, Vertiv, CoreWeave, Rubrik, Lambda, Greenlight, Ironclad, and Saviynt. Strategic partnerships include Databricks (2023), Snowflake (2022), Snyk (2023), and deep integrations with AWS, CrowdStrike, and Wiz.
Monad operates a product-led growth model with a free 1 TB/month public beta tier and self-serve onboarding, complemented by direct enterprise sales for larger deployments. Pricing is volume-based and quote-based for enterprise tiers; the company offers SaaS, on-premises, and hybrid deployment models. Revenue is not publicly disclosed. Leadership includes co-founder and CEO Christian Almenar and co-founder and CTO Jacolon Walker. The company maintains a fully remote workforce of 11-50 employees.
Monad firmographics
Firmographics- Name
- Monad
- Legal name
- Monad, Inc.
- Website
- https://monad.com
- Company type
- Private
- Founded year
- 2020
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Monad is a security data pipeline platform that ingests, normalizes, filters, enriches, and routes security telemetry from 300+ tools to SIEMs and data warehouses. It serves enterprise security and DevOps teams, including customers such as Robinhood, Upstart, and Vertiv, via a free-tier PLG model and volume-based enterprise contracts.
- Ownership category
- akta.pro rank
Monad industry classification
Industry- Product category
- Security Data Pipeline / SIEM Data Management
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518210)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Processing & Data Preparation (7374)
- akta.pro primary industry
- API Management & Gateways (BPAMAOAA)
- akta.pro secondary industry
- Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)
Keywords
Where Monad is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Monad business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations
Revenue model
- SaaS Subscription - Security Data Pipeline Platform: Cloud-based subscription service for security data pipeline management. Customers pay based on data volume processed. The platform is available in public beta with a free tier offering 1 TB/month. Pricing is quote-based for enterprise tiers with custom volume requirements.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Free tier - 1 TB/month for public beta users |
| Subscription | Annual | Enterprise tier - Custom pricing based on volume and requirements |
Go-to-market motion2 records
Distribution channels4 records
Marketing channels5 records
Monad product offering
Product offeringCore offering
Monad provides a managed security data pipeline platform that ingests, normalizes, filters, enriches, and routes security data from over 300 pre-built tool integrations to destinations such as SIEMs, data lakes, and data warehouses. The platform reduces SIEM ingestion costs through in-flight filtering (up to 70% noise reduction) and is offered as SaaS, on-premises, or hybrid deployments for enterprise security and DevOps teams.
Product overview
Monad is a security data cloud company offering a unified platform for security data pipelines. The core platform provides managed ETL pipelines that normalize, filter, enrich, and route security data from various sources to destinations like SIEMs and data warehouses. Key modules include Managed Data Pipelines (for connecting security tools), In-flight Data Transforms (filtering up to 70% of noise), Rule-Based Data Routing, Pipeline Enrichments (real-time context), Monad Alerts (monitoring and alerting), Data Routing/Conditionals, Pipelines (DAG orchestration), SSO, and the MoM (Monad Object Model) unified data model. The platform integrates with 300+ security tools across categories including AWS, Azure, GCP, CrowdStrike, Wiz, Splunk, Snowflake, Databricks, and others. Monad acquired Tarsal to enhance its pipeline capabilities. The company is headquartered in San Francisco and was established in May 2020.
Differentiator
Problem solved
Functional benefit
Products and services
- Monad Security Data Pipeline Platform Managed ETL pipeline platform that ingests, normalizes, filters, enriches, and routes security data from 300+ pre-built security tool integrations to destinations including SIEMs, data lakes, and data warehouses. Designed for enterprise security operations, DevOps, and cloud engineering teams seeking to cut SIEM costs and eliminate custom pipeline engineering.
Quantifiable outcome
- Up to 70% data reduction through filtering before SIEM ingestion
- +2 more outcomes
Companies that use Monad
Customer profileNamed customers9 records
Segments4 records
Ideal customer profiles3 records
Monad technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration50 records
AI capability1 record
Feature7 records
Monad partnerships and signals
Strategic signalPartnerships
Seven partnerships are on record, tiered major and core.
- TarsalmajorAcquisition of Tarsal announced, described as 'building the most powerful security data pipelines together.' Tarsal's technology will be integrated into Monad's platform to enhance security data pipeline capabilities.
- DatabrickscoreStrategic partnership to deliver security data directly to the Databricks Lakehouse Platform. Enables enterprise organizations to automate security data aggregation, enrichment, and triage. Integration allows security and data teams to automatically ingest, aggregate, and analyze security findings.
- SnykcoreIntegration partnership through Snyk's Partner Solutions Directory. Monad enriches Snyk's security findings with data from elsewhere in customers' IT environments, loads data into data warehouses, and delivers insights to stakeholders. Vertiv is a first customer of this integration.
- SnowflakecorePartnership with Snowflake to unify security data in their data warehouse platform. Enables customers to load security data with one-click integrations, using Monad's unified security data model (MoM) through standard SQL queries. Allows integration with ticketing systems, visualization tools, and workflow management.
- AWScoreDeep integration with AWS services including CloudTrail, CloudWatch, GuardDuty, Security Hub, Inspector, IAM, Config, EKS, RDS, and S3. Trusted partner status with AWS Marketplace availability.
- WizcoreIntegration partnership with Wiz for cloud security findings. Monad can ingest Wiz security findings and route them to data warehouses or SIEMs. Recognized with Wiz's Inaugural Partner Award.
- CrowdStrikecoreIntegration with CrowdStrike Falcon platform including EDR data, Falcon Next-Gen SIEM, and vulnerability findings. Pre-built connectors for CrowdStrike data sources.
Scale indicators4 records
Recent moves6 records
Expansion highlights6 records
Monad competitors and assessment
Company assessmentDirect peers
- Cribl: Cribl is the leading direct competitor in security/observability data pipelines, offering Cribl Stream for routing, filtering, and enriching telemetry to SIEMs and data lakes. Closely aligned business model, target buyer (security and ops teams), and core technology (ETL pipeline with pre-built connectors), making it the most directly comparable peer to Monad.
- Mezmo: Mezmo (formerly Loggly) is a direct competitor offering a telemetry data pipeline platform for routing and transforming log data to destinations like Splunk, Datadog, and Snowflake. Targets the same security operations and DevOps buyer personas with overlapping ETL, enrichment, and cost-reduction capabilities.
Broad incumbents
- Splunk: Splunk (now part of Cisco) is the dominant SIEM/observability platform and a primary destination for Monad's data routing. Splunk offers overlapping data pipeline capabilities within its ecosystem and represents both a major integration partner and a potential competitive threat as it expands ingestion and transformation features.
- Datadog: Datadog is a broad observability and security platform that ingests, processes, and routes log data at massive scale. While not a pure pipeline play, its Logs and Cloud SIEM products overlap with Monad's value proposition of consolidating and routing security telemetry, particularly for customers already standardized on Datadog.
- Sumo Logic: Sumo Logic is a SaaS log analytics and SIEM platform with integrated ingestion pipelines. Competes as a destination for security telemetry but also offers transformation and routing features that overlap with Monad's core capabilities for cost-conscious security teams.
- CrowdStrike: CrowdStrike is a leading endpoint security vendor with its Falcon Next-Gen SIEM offering, which competes with both traditional SIEMs and adjacent pipeline tooling. Monad integrates with CrowdStrike as a source and destination, illustrating the dual role of partner and competitor as CrowdStrike expands its data platform.
Emerging players
- Panther: Panther is a cloud-native SIEM with built-in data lake architecture and Python-based detection-as-code. Competes with Monad indirectly by offering an integrated ingestion-to-detection platform that reduces the need for separate pipeline tooling, particularly for security-focused buyers prioritizing detection engineering.
- Snowflake: Snowflake is both a core Monad integration partner and an emerging competitor in security data analytics through its security workload offerings. Customers using Snowflake as their security data lake benefit from Monad's pre-built pipelines but may face go-to-market tension as Snowflake builds native security features.
- Databricks: Databricks is a key Monad integration partner for security data lakehouse use cases but also offers its own data platform capabilities that overlap with Monad's value proposition. Like Snowflake, represents both a co-sell opportunity and a potential competitive encroachment as Databricks expands security-specific features.
- Vector (by Datadog/Timber): Vector is an open-source observability data pipeline tool maintained by Datadog that handles high-performance log routing, transformation, and enrichment. Competes with Monad's managed pipeline offering as a free alternative for engineering teams willing to operate the infrastructure themselves.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Monad social profiles
Digital presenceMonad financial estimates
Financial estimateRevenue estimate
Valuation estimate
Monad leadership team
Management profileNumber of profiles
Profiles2 records
Monad subsidiaries and ownership
Company hierarchySubsidiaries1 record
Monad funding detail
Funding detailFunding overview
Funding rounds2 records
Investors2 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Monad M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Monad
What does Monad do?
Monad provides a managed security data pipeline platform that ingests, normalizes, filters, enriches, and routes security data from over 300 pre-built tool integrations to destinations such as SIEMs, data lakes, and data warehouses. The platform reduces SIEM ingestion costs through in-flight filtering (up to 70% noise reduction) and is offered as SaaS, on-premises, or hybrid deployments for enterprise security and DevOps teams.
Is Monad a public or private company?
Monad is a private company. It is classified as venture growth investor backed and is currently operating.
When was Monad founded?
Monad was founded in 2020. It employs 51 to 100 people.
Where is Monad based?
Monad is headquartered in San Francisco, United States, in the North America region.
How does Monad make money?
One revenue line is on record: saaS Subscription - Security Data Pipeline Platform.
Who are Monad's main competitors?
Direct peers on record are Cribl and Mezmo. Broad incumbents are Splunk, Datadog, Sumo Logic and CrowdStrike. Emerging players are Panther, Snowflake, Databricks and Vector (by Datadog/Timber).
Does Monad have an API?
Yes. Monad offers a REST API and Go SDK for developer-friendly ETL operations. The platform provides real APIs, real SDKs, real docs. Use Python, Go, or the REST API — no proprietary languages or vendor lock-in tactics. Developer documentation is at app.monad.com/docs/components/intro.
What industry is Monad in?
Monad's product category is Security Data Pipeline / SIEM Data Management. Its primary akta.pro industry code is BPAMAOAA, API Management & Gateways, with a secondary code of BPAEADAL, Data Security & Privacy Managed Services (DLP/Encryption). Its NAICS code is 518 and its SIC code is 7370.