CeTu

What CeTu does

CeTu is a private, GenAI-native telemetry pipeline platform purpose-built for security operations (SecOps) teams. Founded in 2021 by Omer Schneider (former Co-Founder & CEO of CyberX, acquired by Microsoft) and Kfir Gollan (former Director of Software Engineering at DriveNets), the company is headquartered in Boston with an Israeli operating subsidiary (CeTu Systems Ltd.). The platform ingests, analyzes, normalizes, enriches, filters, and routes security log data to SIEMs, data lakes, and low-cost cloud storage, offering 400+ pre-built connectors for on-prem, cloud, SaaS, and IoT telemetry sources with integrations for Splunk, Microsoft Sentinel, and Google SecOps.

The platform is organized into three solution modules — Telemetry Onboarding, Routing and Integrations, and Security Insights — and is augmented by Zoe, a natural-language AI assistant for pipeline creation, and InsightScan, a free assessment tool that quantifies SIEM coverage gaps, data waste, and misconfigured detection rules. The core differentiator is a purpose-built, security-specific GenAI model that the company contrasts with generic first-generation pipeline tools such as Cribl, emphasizing an agentless, no-code/low-code interface that enables engineers to deliver ROI in days rather than months.

CeTu monetizes via annual enterprise SaaS subscriptions sold through a sales-led motion with quote-based pricing. Distribution combines direct enterprise field sales with an AWS Marketplace listing (August 2025) that enables procurement via existing AWS agreements. The company targets enterprise security operations centers and detection engineering teams, with documented outcomes including up to 80% SIEM ingest cost reduction, 50% data engineering time savings, and a Fortune 500 customer reporting ~$1M annual security log savings. Notable investors include Mickey Boodaei, Rakesh K. Loonkar, Mike Fey, Dan Amiga, and Udi Mokady, all prominent cybersecurity founders and operators.

Name

CeTu

Legal name

CeTu, Inc.

Website

https://cetu.io

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

11–50 employees

Short description

CeTu is a GenAI-native telemetry pipeline platform that ingests, normalizes, enriches, and routes security log data to SIEMs, data lakes, and cloud storage for enterprise SecOps teams, using a security-specific AI model and 400+ pre-built connectors.

Ownership category

akta.pro rank

Product category

Security Operations / Telemetry Pipeline Management

NAICS

Computer Systems Design and Related Services (54151), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Prepackaged Software (7372)

akta.pro primary industry

Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK)

Keywords

• Telemetry pipeline management
• SIEM cost optimization
• Security data orchestration
• AI log analysis
• SecOps automation

Headquarters

HQ city

Boston

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. SaaS Subscription: CeTu operates as a SaaS platform providing subscription-based access to its AI-powered telemetry pipeline management platform. The platform is sold to enterprise security teams with pricing likely based on data volume or tiered features.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels5 records

Core offering

CeTu sells a GenAI-native telemetry pipeline platform for security operations that ingests, analyzes, enriches, normalizes, filters, and routes security log data to SIEMs, data lakes, and low-cost cloud storage. It is built on a purpose-built, security-specific AI model and uses an agentless, no-code/low-code architecture with natural language pipeline creation (Zoe assistant). The platform helps enterprise security teams cut SIEM ingest costs, eliminate detection blind spots, and accelerate threat detection.

Product overview

CeTu is a GenAI-native telemetry pipeline platform that transforms raw security logs into meaningful, enriched signals and routes them to optimal destinations. The platform consists of a unified core platform with three integrated solution modules: Telemetry Onboarding (for rapid data source connectivity via 400+ connectors), Routing and Integrations (for AI-driven SIEM analysis, data transformation, and intelligent routing), and Security Insights (for continuous SIEM health monitoring and optimization). The platform is enhanced by Zoe, an AI assistant enabling natural language pipeline creation, and InsightScan, a free assessment tool. CeTu differentiates through its security-specific GenAI model and agentless, no-code approach that enables engineers to achieve ROI in days rather than months.

Differentiator

Problem solved

Functional benefit

Products and services

• CeTu Platform GenAI-native telemetry pipeline platform that ingests, analyzes, enriches, filters, and routes security log data to SIEMs, data lakes, and cloud storage. Designed for enterprise security operations teams to cut SIEM ingest costs, eliminate detection blind spots, and accelerate threat detection.
• Telemetry Onboarding Solution for rapid onboarding of telemetry data sources via 400+ pre-built connectors, AI-assisted parsing, and low-code pipeline creation. Unifies telemetry from on-premises, cloud, SaaS, and IoT environments.
• Routing and Integrations Solution providing AI-driven SIEM analysis, data transformation, and intelligent routing that can reduce log volume by up to 80%. Routes data to optimal destinations and maintains vendor independence across SIEMs, data lakes, and cloud storage.
• Security Insights Solution that continuously evaluates SIEM health, identifying coverage gaps, performance inefficiencies, and cost hotspots. Delivers actionable recommendations for SIEM configuration and telemetry optimization, including MITRE ATT&CK coverage analysis.

Quantifiable outcome

• Reduce SIEM ingest costs by up to 80%
• +5 more outcomes

Named customers3 records

Segments2 records

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration6 records

AI capability7 records

Feature7 records

Partnerships

One partnership is on record.

• Amazon Web Services (AWS)coreChannel Partner/ Reseller/ Distributor · 19 August 2025CeTu joined AWS Partner Network. SecOps data management solution now available on AWS Marketplace, allowing customers to procure through existing agreements and access unspent AWS credits for pre-approved IT budgets.

Scale indicators4 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• Datadog: Datadog's Logs and Cloud SIEM products offer centralized log ingestion, routing, and analysis across security and observability use cases. It is an expanding presence in the same buyer conversations CeTu participates in.
• Dynatrace: Dynatrace's observability platform includes log management, ingest pipelines, and analytics. While focused on operations, it increasingly addresses security telemetry use cases that overlap with CeTu's scope.
• Sumo Logic: Sumo Logic provides cloud-native log management and security analytics with ingestion routing and storage tiering capabilities. It overlaps with CeTu's telemetry-to-SIEM routing wedge across mid-market and enterprise SOCs.
• Elastic: Elastic's observability and security offerings include ingest pipelines, log analytics, and SIEM capabilities that sit adjacent to CeTu's orchestration layer. It is a comparable vector for security telemetry processing in enterprise environments.
• Splunk: Splunk (now part of Cisco) is the dominant SIEM and a direct integration destination for CeTu. As the category owner for log analytics, Splunk both validates the telemetry pipeline opportunity and competes with native data-management and routing capabilities embedded in its platform.
• New Relic: New Relic provides a unified observability platform with log ingest pipelines and analytics that compete for security-relevant telemetry workloads, frequently appearing alongside CeTu in enterprise platform evaluations.
• Microsoft Sentinel: Microsoft Sentinel is a cloud-native SIEM that CeTu integrates with, and it continues to add native data connectors, normalization, and pipeline features. As a hyperscaler SIEM with deep enterprise penetration, it is a critical partner and a long-term platform risk.

Emerging players

• Tenzir: Tenzir is a security data pipeline and analytics platform purpose-built for SOC use cases. As an early-stage, security-focused peer, it competes in the same niche CeTu targets.
• Mezmo (formerly Logz.io): Mezmo operates a cloud-native log management platform with pipeline and routing features, and Logz.io historically served cloud SIEM workloads. Both brands address similar buyer pain to CeTu at slightly different maturity/scale points.

Direct peers

• Cribl: Cribl's flagship Stream product is a vendor-agnostic telemetry pipeline platform that routes, reshapes, and enriches observability and security data. It is the most direct competitor to CeTu, and CeTu explicitly positions against it as the next-generation, security-specific alternative.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/cetu-data-orchestration

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CeTu