What Tarsal does

Tarsal was a private data pipeline company founded in 2021 and headquartered in San Francisco, United States. It built an ETL platform designed specifically for security teams to manage the increasing volume of security data by integrating with various data sources and enabling data movement for analytics. The company's core product was a security data movement platform that addressed the challenges of big data management in security, targeting enterprise security teams that needed to integrate disparate data sources for downstream analytics and operations.

Tarsal differentiated itself through domain specialization, focusing exclusively on security data ETL rather than offering a general-purpose data pipeline. Its go-to-market was horizontal within the security team buyer persona, though the company did not publicly disclose pricing models, named customers, or specific contract structures. In March 2024, Tarsal raised a $6 million seed funding round led by Harpoon Ventures and Mango Capital, with additional participation from Abstract, Backend Capital, and Y Combinator. Concurrently, the company appointed Barrett Lyon as CTO to lead platform scaling efforts.

Following the seed round, Tarsal was acquired by Monad, a security data pipelines platform for enterprise teams. The acquisition was announced on Monad's website, and Tarsal's team and technology were integrated into Monad's platform, which serves enterprise customers including Robinhood, CoreWeave, Rubrik, Lambda, Upstart, Ironclad, Saviynt, and Greenlight. As a result of the acquisition, Tarsal ceased to operate as an independent entity.

Name

Tarsal

Website

https://tarsal.co

Company type

Private

Founded year

2021

Operating status

Acquired

Headcount range

11–50 employees

Short description

Tarsal was a San Francisco-based ETL platform for security teams, building data pipelines to integrate and manage large volumes of security data. It was seed-funded in 2024 and subsequently acquired by Monad.

Ownership category

akta.pro rank

Product category

Security Data Pipeline

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182), Computer Systems Design Services (541512)

SIC

Services-Computer Processing & Data Preparation (7374), Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Batch ETL/ELT Platforms (HDAEACAA)

Keywords

• Security data pipeline
• Security ETL platform
• SIEM data integration
• Security analytics platform
• Security data movement

Headquarters

HQ city

San Francisco

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel

Core offering

Tarsal builds a security-focused ETL platform that helps security teams manage the increasing volume of security data by integrating with various data sources and enabling data movement, normalization, and analytics. The platform is designed to address big data management challenges specific to security use cases, providing ETL capabilities and integration with security data sources for downstream analytics.

Differentiator

Problem solved

Functional benefit

Products and services

• ETL Platform

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

One partnership is on record.

• MonadcoreStrategic or Co-development PartnerMonad has acquired Tarsal to enhance its security data pipeline capabilities. Tarsal's team and technology are being integrated into Monad's platform to strengthen their ETL offerings for security teams.

Scale indicators2 records

Recent moves4 records

Expansion highlights3 records

Direct peers

• Cribl: Cribl is a direct competitor offering a security and observability data pipeline platform (Cribl Stream) that routes, filters, and enriches log data before it reaches SIEMs and analytics stores. It targets the same enterprise security teams as Tarsal/Monad and is the category leader.
• Monad: Monad is the acquirer of Tarsal and the closest functional overlap: a managed security data pipeline that normalizes, filters, enriches, and routes security telemetry to cut SIEM costs. Pre-acquisition it was a direct competitor; post-acquisition it absorbs Tarsal's technology.
• Mezmo: Mezmo (formerly Logz.io's log pipeline product, later spun out) provides a cloud-native data pipeline for routing and transforming log and security telemetry. It competes with Tarsal/Monad in security data movement, normalization, and cost-optimized SIEM ingestion.

Broad incumbents

• Datadog: Datadog is a broad observability and security platform with log management, SIEM-like capabilities, and pipeline features. It is an incumbent that competes indirectly by absorbing data pipeline functionality into a much larger monitoring and security suite.
• Splunk: Splunk is the dominant SIEM and log analytics platform and is heavily integrated into security operations. Its data processing and ingestion capabilities overlap with Tarsal's ETL positioning, and it represents the incumbent whose costs Tarsal/Monad aim to reduce.
• Sumo Logic: Sumo Logic is a cloud-native log management and security analytics platform. It serves overlapping enterprise security customers and competes with Tarsal/Monad in log ingestion, transformation, and downstream routing to SIEM-class workloads.
• Snowflake: Snowflake is a broad cloud data platform increasingly used as a security data lake for SIEM and XDR workloads. While not a direct ETL competitor, it offers an alternative destination architecture that competes for the security telemetry budget Tarsal/Monad target.

Emerging players

• Panther Labs: Panther is a cloud-native SIEM alternative that ingests security data at scale and performs detection-as-code on top of a data lake. It overlaps with Tarsal/Monad in the security data pipeline and normalization layer that feeds modern detection and response workflows.
• Hunters: Hunters is a security operations platform that ingests and correlates security telemetry from multiple sources and competes for the same enterprise SOC budget as SIEM alternatives. Its data ingestion and normalization approach overlaps with Tarsal's ETL focus.
• ChaosSearch: ChaosSearch provides a log analytics and data lake platform that ingests and queries security and operational logs at low cost. It is an emerging alternative in the same security data management space, competing on cost and flexibility of log storage.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat2 records

Key risks5 records

Key highlights5 records

Customer concentration

• Xx.com/tarsalhq
• LinkedInlinkedin.com/company/tarsal

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds2 records

Investors5 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Tarsal